Malware shipped in Rank Math PRO 3.0.123; clean build is 3.0.124
Only premium downloads activated between October 15 and 16, 2023, are in scope; the free plugin is unaffected.
72
Product
Rank Math PRO
- Mentions · 7d5
- Mentions · 30d5
- All mentions5
- First seenOct 19, 2026
- Last mentioned5d ago
Timeline
5 articles · newest firstMalware in Rank Math PRO 3.0.123 installs self-rebuilding backdoors
Only packages downloaded from October 15 at 20:02 UTC to October 16 at 07:12 UTC were tainted; clean release is 3.0.124.
74
Trojanized Rank Math PRO 3.0.123 planted website backdoors
Only downloads from a roughly 11-hour window were affected; the vendor shipped clean version 3.0.124.
74
Rank Math PRO downloads carried a self-restoring backdoor for about 11 hours
Copies fetched from rankmath.com between October 15 20:02 UTC and October 16 07:12 UTC can recreate a hidden backdoor; clean release is 3.0.124.
78
Malicious Rank Math PRO 3.0.123 packages compromise WordPress sites
Packages fetched from October 15, 20:02 UTC to October 16, 07:12 UTC may be infected; 3.0.124 is clean.
76
Related CVEs
by mentions- Supply-chain malware in some Rank Math SEO PRO 3.0.123 packages
Appears with
- Rank Mathvendor · 5
- Wordfenceorganization · 2
- Patchstackorganization · 1
- Rank Math SEOproduct · 1
- WordPressproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.