Rank Math's paid WordPress plugin carried malware in official downloads
Compromised PRO 3.0.123 packages were available for about 11 hours on October 15th and 16th; activating one could expose credentials and install persistent backdoors.
By RuntimeWire Staff · Published
Primary source: BleepingComputer
Why it matters
The compromise reached customers through downloads from Rank Math's own distribution channel. Activating an affected package could expose secrets and leave access behind even after the plugin is updated.
Rank Math, the WordPress SEO company co-founded by Bhanu Ahluwalia, Nimit Kashyap and Suraj Vibhute, said some downloads of its paid PRO plugin carried malware from its official website between October 15th and October 16th. In BleepingComputer's October 19th report, the publication said the affected package could install backdoors on websites if activated.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.