Malware shipped in Rank Math PRO 3.0.123; clean build is 3.0.124
Only premium downloads activated between October 15 and 16, 2023, are in scope; the free plugin is unaffected.
72
Vendor
Rank Math
- Mentions · 7d5
- Mentions · 30d6
- All mentions6
- First seenOct 17, 2026
- Last mentioned5d ago
Timeline
6 articles · newest firstMalware in Rank Math PRO 3.0.123 installs self-rebuilding backdoors
Only packages downloaded from October 15 at 20:02 UTC to October 16 at 07:12 UTC were tainted; clean release is 3.0.124.
74
Trojanized Rank Math PRO 3.0.123 planted website backdoors
Only downloads from a roughly 11-hour window were affected; the vendor shipped clean version 3.0.124.
74
Rank Math PRO downloads carried a self-restoring backdoor for about 11 hours
Copies fetched from rankmath.com between October 15 20:02 UTC and October 16 07:12 UTC can recreate a hidden backdoor; clean release is 3.0.124.
78
Malicious Rank Math PRO 3.0.123 packages compromise WordPress sites
Packages fetched from October 15, 20:02 UTC to October 16, 07:12 UTC may be infected; 3.0.124 is clean.
76
PSA: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads
Some Rank Math SEO PRO 3.0.123 downloads included malware that can backdoor WordPress sites and steal credentials.
80
Related CVEs
by mentions- Supply-chain malware in some Rank Math SEO PRO 3.0.123 packages
Appears with
- Rank Math PROproduct · 5
- Wordfenceorganization · 3
- WordPressproduct · 2
- Rank Mathorganization · 1
- Rank Math SEO PROproduct · 1
- Patchstackorganization · 1
- Rank Math SEOproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.