Skip to main content
Apexward Pulse
Type Incident

WordPress

Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack

1 source

At a glance

Low
30-day window, from the last update
Evidence-weighted, not popularity
Why Low

Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.

Briefing

  • Do not treat uncorroborated claims as confirmed breaches.

Questions to ask IT

  • Do we use WordPress, and has anything unusual been seen on it?
  • Would our monitoring spot an attack like this, and who would we call if it did?

Next steps

  1. Confirm whether this affects systems or suppliers in your estate

Summary

  • Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between 15 October and 16 October. The post Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack appeared first on SecurityWeek. " ": "Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between 15 October and 16 October." " ": "Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack" This website stores cookies on your computer.

Read the original reportSecurityWeek(opens in a new tab)

Products and services involved

Pulse

Last checked 3d ago · Recheck overdue since 7 Nov 2026, 02:03 UK time · 3 quiet checks collapsed

  1. Story19 Oct 2026, 17:14 UK time · 19 Oct

    Linked reporting from SecurityWeek (independent original reporting).

    Read source (SecurityWeek)

1 entry so far. The timeline chart appears once this story has more history.

Sources

How we know

Statements extracted from sources. Higher confidence means stronger corroboration.

  • ClaimedHeadline60% confidence

    Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack

  • ProbableSummary fact75% confidence

    Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between 15 October and 16 October. The post Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack appeared first on SecurityWeek. Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack This website stores cookies on your computer.