From Product Mentions to Incident Evidence: A Safer Rank Math Triage

Rank Math reported that some downloads of Rank Math PRO 3.0.123 between October 15, 2026, 20:02 UTC and October 16, 2026, 07:12 UTC contained malware. Activating this package could compromise sites via additional files, administrator accounts, or server-level changes. While version 3.0.124 is the clean replacement, installing it does not prove a server is clean. Wordfence identifies this as CVE-2026-111862. Sites that activated the affected version should be treated as compromised according to the vendor.