WordPress Rank Math Plugin Compromised for Backdoor

Summary: Some downloads of the Rank Math PRO WordPress plugin contained malware that planted hidden backdoors via a supply-chain attack. This affected downloads from the plugin’s official website.

Last week, it was discovered that some versions of the popular WordPress SEO plugin Rank Math PRO, downloaded from the official website, were infected with malware. This was a supply-chain attack that planted hidden backdoors on sites that downloaded the plugin. Such attacks pose a serious threat to the security of the software supply chain.

Attackers likely infiltrated Rank Math’s distribution infrastructure and injected malicious code into legitimate plugin files. This malicious code created a persistent backdoor on target WordPress sites when the plugin was installed. This backdoor allows attackers to gain control of the site, exfiltrate data, or perform other malicious actions.

For live systems and infrastructure, this once again demonstrates how critical the security of third-party components is. For WordPress sites, verifying the sources of plugin and theme updates and always downloading from trusted sources is vital. Additionally, server-side file integrity checks and regular security scans should be performed.

Engineers should verify the hash values or digital signatures of all external dependencies, especially those used in production environments. Furthermore, additional security layers like web application firewalls (WAF) and runtime application self-protection (RASP) solutions can help mitigate the impact of such attacks.

🔗 Source: BleepingComputer
📡 Authoritative feeds & live tracking: Radar