Rank Math SEO Pro Version 3.0.123 Hit by Supply Chain Malware Attack
Users who downloaded Rank Math SEO Pro version 3.0.123 during a specific window in October 2026 are urged to update to 3.0.124 and scan for malicious backdoors and credential theft.
Rank Math SEO PRO version 3.0.123 suffered a supply chain compromise affecting packages downloaded between October 15, 2026, at 20:02 UTC and October 16, 2026, at 07:12 UTC. Version 3.0.124 is now available to resolve the vulnerability.
The embedded malware carries a 9.8 CVSS score. It grants unauthorized access, exfiltrates database credentials and API keys, and communicates with rank1cdn[.]com. It also recreates hidden backdoors on page visits.
Check for unauthorized wp_options keys, hidden PHP backdoors, and unauthorized administrator accounts. The malware may deploy a fake WordPress core file, PHP-executable files with .cache extensions, and a system cron marker.
Running version 3.0.123 does not automatically imply a compromise, because the issue is limited to the specific download window. However, you must treat any site that activated the plugin during this window as compromised. Operators should review the official incident report to ensure all traces of infection are removed after updating.