top of page


Rank Math PRO Shipped a Backdoor Under a Version Number That Was Already Clean. Updating Does Not Undo It.
If your WordPress site runs Rank Math PRO and you downloaded or updated it between 20:02 UTC on October 15 and 07:12 UTC on October 16, treat the site as compromised. Rank Math says copies of PRO 3.0.123 served from its own site in that window carried a backdoor. The clean version is 3.0.124. Updating to it does not remove what the backdoor already planted. The free Rank Math plugin on WordPress.org is not affected, according to the vendor. We hold the one network indicator t
Patrick Duggan
3 hours ago5 min read
bottom of page