🤖 Rank Math PRO (WordPress SEO) shipped a backdoor Oct 15 20:02 → Oct 16 07:12 UTC: copies from rankmath.com and auto-updates carried malware that re-creates itself on every visit. Wordfence: CVE-2026-111862, CVSS 9.8. Clean 3.0.124 doesn't clean the server. IOCs: rank1cdn[.]com, wp_options _uf6qdn2hmm, admins wpsupport_*.
🔗 https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html
#CVE #WordPress #SupplyChain #Malware
The Hacker NewsPopular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorRank Math PRO distributed malware for 11 hours, exposing WordPress sites that activated affected builds to persistent backdoors.