WordPress SEO plugin Rank Math compromised to backdoor websites

The Rank Math PRO WordPress plugin was compromised in a supply-chain attack where certain downloads from the official vendor website contained malware. This malware planted hidden backdoors on websites using the plugin, potentially allowing attackers to maintain persistent unauthorized access. The attack leverages the trust in the official plugin distribution channel to infect sites that install or update the plugin from the compromised source.

Websites that installed the compromised versions of the Rank Math PRO plugin may have hidden backdoors, enabling attackers to gain unauthorized access and control. This could lead to website defacement, data theft, or further malware deployment. The supply-chain nature of the attack increases the risk as it affects users trusting the official plugin source.

No patch or remediation details are provided in the available information. Users should verify the integrity of their Rank Math PRO plugin installations and consider reinstalling from a verified clean source once the vendor confirms a fix. Monitoring for unauthorized access and removing any detected backdoors is recommended. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.