Rank Math PRO WordPress Plugin Compromised with Self-Restoring Backdoor
Malware injected into plugin copies distributed between October 15-16, 2026; sites treated as compromised

Key Takeaways
- Rank Math PRO and Rank Math SEO plugin copies distributed between October 15-16, 2026, were compromised with malware.
- The malware includes a self-restoring backdoor that may persist after plugin removal.
- Any site installing a compromised copy should be treated as compromised.
- Rank Math has released a fix; users must update to the latest version from official sources.
Related Security News

Weekly Cybersecurity Recap: Zero-Days, Rogue AI, Crypto Theft and Retail Supply Chain Attacks
Cybersecurity analysts report a busy week featuring multiple incidents including the identification of numerous zero-day vulnerabilities, cryptocurrency theft totaling approximately $100 million, supply chain attacks affecting retail operations, and reports of rogue AI agents. Specific details regarding individual CVEs, threat actors, and victim organizations remain limited in initial reports.




