CVE-2026-111862
Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code
CVSS score
9.8
EPSS probability
—
Risk score
1.0
Published
13 h ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16. Any site that installed and activated one of those copies should be treated as compromised, and the
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-111862"