> TritonInfoSec News
Home / Oct 20, 2026 / Story
0
#4 The Hacker News general October 19, 2026 at 16:28 UTC

Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor

By [email protected] (The Hacker News)

AI Summary

The Rank Math PRO WordPress SEO plugin (version 3.0.123) was compromised in a supply chain attack between 20:02 UTC October 15 and 07:12 UTC October 16, with malicious downloads served directly from rankmath.com delivering a self-restoring backdoor. Any WordPress site that installed or updated the plugin during that window should be treated as fully compromised, as the malware is designed to persist after removal attempts.

Read full article → https://thehackernews.com/2026/10/popular-wordpres…

Relevance score: 84.0/100

# More from October 20

  1. 1
    Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site Krebs on Security
  2. 2
    ConnectWise suspends Cloud Backup service after supply chain attack The Record
  3. 3
    Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack SecurityWeek
  4. 5
    F5 releases out-of-band patches for critical NGINX vulnerabilities BleepingComputer
  5. 6
    Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor The Hacker News
  6. 7
    Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers The Hacker News
  7. 8
    MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks SecurityWeek
  8. 9
    DHS to ban DeepSeek from federal civilian agencies CyberScoop
  9. 10
    Hackers hijack AOMEI update servers to secretly spread malware BleepingComputer