Rank Math PRO WordPress SEO Plugin Compromised with Self-Restoring Backdoor Malware

Copies of Rank Math PRO WordPress SEO plugin downloaded between October 15-16, 2026, contained malware that established a self-restoring backdoor. Sites using compromised versions require immediate security assessment and cleanup.

Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16.

Any site that installed and activated one of those copies should be treated as compromised, and the

Read original article