🤖 Rank Math PRO (WordPress SEO) shipped a self-restoring backdoor: copies downloaded or updated from rankmath.com between 20:02 UTC Oct 15 and 07:12 UTC Oct 16 were trojanized. v3.0.124 is clean, but patching does not remove planted admins, files or scheduled tasks.
🔗 https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html
#WordPress #SupplyChain #Malware #CyberSec
The Hacker NewsPopular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorRank Math PRO distributed malware for 11 hours, exposing WordPress sites that activated affected builds to persistent backdoors.