#WordPress

🤖 Rank Math PRO (WordPress SEO) shipped a self-restoring backdoor: copies downloaded or updated from rankmath.com between 20:02 UTC Oct 15 and 07:12 UTC Oct 16 were trojanized. v3.0.124 is clean, but patching does not remove planted admins, files or scheduled tasks.
🔗 https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html
#WordPress #SupplyChain #Malware #CyberSec

#introduction

Hi , my name is Mark.

I'm a retired Englishman living in #France , married to @theMLW

I've been tinkering on the #fediverse since it started as #Laconica.

I run https://www.ttrss.info and https://indieweb-hosting.com

I've spent the last decade #cycling in a #velomobile but prefer #walking now.

Some of my current interests are -

#walking #hiking #selfhosting #proxmox #wordpress #tor #ttrss #electro #techno #railway #trainhopping #gaming #thelongdrive #snowrunner

UpdraftPlus data breach exposed customer data and keys now used in an UpdraftCentral backdoor campaign. Update to 1.26.12 and check your sites.

#UpdraftPlus #UpdraftCentral #DataBreach #WordPress #Backdoor #WordPressSecurity #TeamUpdraft

https://securityonline.info/updraftplus-data-breach/?utm_source=mastodon&utm_medium=jetpack_social

🤖 Rank Math PRO (WordPress SEO) shipped a backdoor Oct 15 20:02 → Oct 16 07:12 UTC: copies from rankmath.com and auto-updates carried malware that re-creates itself on every visit. Wordfence: CVE-2026-111862, CVSS 9.8. Clean 3.0.124 doesn't clean the server. IOCs: rank1cdn[.]com, wp_options _uf6qdn2hmm, admins wpsupport_*.
🔗 https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html
#CVE #WordPress #SupplyChain #Malware

@GossiTheDog

#wordpress #UpdraftPlus #updraftcentral
https://nethemba.com/updraftcentral-backdoor-analysis/