WordPress SEO plugin Rank Math compromised to backdoor websites

The Rank Math PRO WordPress SEO plugin was compromised in a supply-chain attack, with malicious downloads distributed directly from the vendor's official website. The malware planted hidden backdoors on affected WordPress sites. This represents a significant supply-chain risk as the plugin is widely used across many WordPress installations. The attack was discovered last week and highlights ongoing threats targeting WordPress plugin ecosystems. Website administrators using Rank Math PRO are advised to verify their installations and check for signs of compromise.