As cited
Copy frozen at (site build).
vulnerabilities
PSA: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads
Rank Math disclosed that some copies of version 3.0.123 of its SEO PRO WordPress plugin contained malware during a specific download window on October 15 and 16, 2026. The affected packages could establish persistent backdoor access, steal credentials, and communicate with an external command server. Rank Math released version 3.0.124 as the clean replacement and provided recovery steps for compromised sites.
Why it matters: WordPress site owners who activated Rank Math SEO PRO 3.0.123 between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC must treat their sites as compromised and perform full recovery, because plugin updates alone will not remove malware that may have established backdoors, unauthorized accounts, or exposed sensitive credentials elsewhere on the server.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
PSA: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads
Rank Math disclosed that some copies of its SEO PRO plugin version 3.0.123 contained malware during a limited distribution window between October 15 and October 16, 2026. Websites that downloaded and activated the affected version should be treated as compromised, as the malware can establish persistent backdoors, steal credentials, and create hidden administrative accounts. Rank Math released version 3.0.124 as the clean replacement and provided detailed recovery procedures including full website restoration from backups created before the incident.
Why it matters: WordPress site owners using Rank Math SEO PRO must immediately verify whether they obtained version 3.0.123 during the October 15-16, 2026 window and treat their sites as fully compromised if the plugin was activated, requiring complete recovery and credential rotation.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
PSA: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads
Rank Math discovered that a limited batch of SEO PRO version 3.0.123 distributed between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC contained embedded malware. The compromised plugin files could establish persistent backdoor access, exfiltrate credentials and application programming interface (API) keys, and create hidden administrator accounts when activated on a WordPress site. Rank Math released version 3.0.124 as the clean replacement and advises affected users to restore from backups created before the incident window, then follow manual remediation steps if backups are unavailable.
Why it matters: WordPress site owners who downloaded or installed Rank Math SEO PRO 3.0.123 during the affected window should immediately verify installation timing and treat active instances as fully compromised, requiring database restoration and credential replacement across all services the web server could access.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
PSA: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads
Rank Math disclosed that some copies of Rank Math SEO PRO version 3.0.123 distributed between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC contained malware. The malware could establish persistent access, exfiltrate credentials, and create hidden backdoors that recreate themselves on website visits. Rank Math released version 3.0.124 as a clean replacement and recommends that website owners who activated an affected copy treat their sites as fully compromised and restore from backups created before the incident.
Why it matters: WordPress site owners using Rank Math SEO PRO must check when they installed version 3.0.123 and, if obtained during the incident window, perform full recovery including credential rotation, not merely updating to the patched version.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
PSA: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads
Rank Math disclosed that some copies of its SEO PRO plugin version 3.0.123, distributed between October 15 and October 16, 2026, contained malware capable of establishing persistent access and exfiltrating credentials. The malware could recreate backdoors, communicate with an external command-and-control server, and leave behind unauthorized accounts and hidden files even after plugin removal. Rank Math released version 3.0.124 as a clean replacement and provided recovery guidance for affected websites.
Why it matters: WordPress site operators who downloaded or installed Rank Math SEO PRO 3.0.123 during the affected window must verify their installation date and treat any activated instance as a full server compromise requiring restore from backup or manual forensic cleanup, credential rotation, and monitoring for malware recurrence.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
PSA: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads
Rank Math disclosed that some copies of its SEO PRO plugin version 3.0.123, distributed between October 15 and October 16, 2026, contained malware capable of establishing persistent access and exfiltrating credentials. The malware could recreate backdoors, communicate with an external command-and-control server, and leave behind unauthorized accounts and hidden files even after plugin removal. Rank Math released version 3.0.124 as a clean replacement and provided recovery guidance for affected websites.
Why it matters: WordPress site operators who downloaded or installed Rank Math SEO PRO 3.0.123 during the affected window must verify their installation date and treat any activated instance as a full server compromise requiring restore from backup or manual forensic cleanup, credential rotation, and monitoring for malware recurrence.
- Source published
- First seen by Cybersecurity Tracker