PT-2026-116378 · WordPress · Rank Math Seo Pro
CVE-2026-111862
·
Published
2026-10-17
·
Updated
2026-10-19
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Rank Math SEO PRO version 3.0.123
Description
A supply-chain compromise occurred where a subset of packages distributed between October 15, 2026, and October 16, 2026, contained embedded malware. This issue has been actively exploited in the wild. The malware beacons to the domain rank1cdn[.]com and installs backdoors. It specifically queries the
wp options table for the variable uf6qdn2hmm and searches for wpsupport admin accounts.Recommendations
Update Rank Math SEO PRO to version 3.0.124.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rank Math Seo Pro