Once again, a new Rank Math security issue…
Rank Math confirmed that PRO version 3.0.123 downloaded between October 15, 20:02 UTC and October 16, 07:12 UTC contained malware!
If that version was activated, they recommend treating the site as compromised. A clean version, 3.0.124, has already been released.
If you installed and activated 3.0.123 during that window, Rank Math recommends restoring from a clean backup from before the incident, running a full security scan, and rotating passwords, database credentials, salts, API keys and other secrets.
If a clean backup is not available, they also published detailed manual cleanup instructions, including indicators of compromise and files/accounts to check.
Full details and recovery guide:
If you use Rank Math PRO, I recommend checking your version and update history as soon as possible…