Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Copies of the paid Rank Math PRO WordPress plugin downloaded from rankmath.com or delivered as updates between October 15 and 16 contained malware that installs a self-restoring backdoor, The Hacker News reports. Rank Math has released a clean version, but Wordfence warns that updating alone does not remove backdoor files, administrator accounts, or scheduled tasks the malware may have left behind. https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html
The Hacker NewsPopular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorRank Math PRO distributed malware for 11 hours, exposing WordPress sites that activated affected builds to persistent backdoors.