Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16.
Any site that installed and activated one of those copies should be treated as compromised, and the malware can recreate its hidden backdoor whenever someone visits the site.
Rank Math has removed the affected files and released a clean version, 3.0.124. Installing it replaces the plugin but does not remove files, administrator accounts, or scheduled tasks the malware may already have placed elsewhere on the server, Wordfence said in an advisory on October 17.
The version number does not show whether a copy is affected. Rank Math's changelog dates 3.0.123 to October 7, more than a week before the window opened, and the notice limits the incident to copies downloaded or installed through an update during the window.
A copy of 3.0.123 obtained before 20:02 UTC on October 15 is outside it.
Rank Math has emailed some users about the incident and told anyone unsure whether the files were installed or activated to contact its support team.
org. org, which lists more than 4 million active installations and was last updated on October 6, is not named in it.
Source link
