rankmath.com Malware Found in Rank Math SEO PRO 3.0.123 Downloads
Article Content
- •Malware was found in Rank Math SEO PRO 3.0.123 downloads during a specific time window.
- •Users who activated the affected version should treat their websites as compromised.
- •Rank Math released a clean version (3.0.124) and provided recovery guidance.
Rank Math disclosed that some downloads of Rank Math SEO PRO version 3.0.123 contained malware. The affected version was downloaded or updated between October 15, 2026, at 20:02 UTC and October 16, 2026, at 07:12 UTC. If activated, the malware could compromise the website. Rank Math released version 3.0.124 as a clean replacement and advised users to treat affected websites as compromised. Users who installed the affected version should restore from a backup made before the incident or have their site cleaned by a professional. Rank Math has records of users who downloaded the affected version and will notify them. The incident is limited to those who downloaded or updated during the specified period.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Rank Math in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
How do I know if my site is affected?
What should I do if my site is compromised?
Is the malware actively being exploited?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…