Rank Math PRO Update Window Delivered Backdoor to WordPress Sites
The paid Rank Math PRO WordPress plugin was distributed with malicious code through rankmath.com and its update system for about 11 hours in mid-October. Rank Math said any site that installed and activated an affected copy should be treated as compromised. The malware included a backdoor designed to restore itself.
Rank Math PRO is a paid plugin for WordPress. According to the available information, malicious code was distributed through the vendor’s website and its update system. The affected distribution window lasted about eleven hours in mid-October.
Rank Math advised that any site which installed and activated an affected copy should be regarded as compromised. The malware included a backdoor intended to re-establish itself.
The incident could affect site owners, businesses, and publishers that rely on the paid plugin, potentially exposing them to unauthorized access, operational disruption, or cleanup costs. Visitors to compromised sites may also face indirect risks if malicious activity persists. Because the backdoor was designed to restore itself, remediation may be more difficult and costly. The episode may also reinforce concerns about trusting plugin update channels, even for commercial products.