EP. 185: Rank Math SEO PRO Supply-Chain Compromise Turned Trusted WordPress Updates Into Backdoors

The Digital Warfare Podcast · Oct 20, 2026 · 4m · transcript

Summary

CVE-2026-111862 tracks a critical supply-chain compromise affecting a subset of Rank Math SEO PRO 3.0.123 packages distributed between October 15 and October 16, 2026. The malicious packages could establish persistent access, communicate with external infrastructure, create hidden backdoors and unauthorized administrator accounts, and expose credentials, database secrets, API keys, and other data available to the web server.

Rank Math removed the compromised files and released version 3.0.124 as the clean replacement. Importantly, simply running version 3.0.123 does not prove…