Rank Math Plugin Accused of Secretly Grabbing Admin Access
gaganghotra_ · x · 2026-08-31
WordPress SEO plugin Rank Math is accused of silently creating WordPress Application Passwords and sending admin privileges to group.one servers when users open the Help & Support section. This grants the company's AI agent potential control over user sites. The plugin runs on over 4 million sites, and rival developers have labeled the behavior a potential backdoor.
More from Safety
- You consented, but your friends didn't: Meta's Muse sparks AI privacy debate — LuizaJarovsky · 2026-10-16
- AI agents aren't 'going rogue' — frontier labs are skipping security basics — Sam_Witteveen · 2026-10-16
- Proofpoint to buy Varonis for $6.3B in cash, a 52% premium, closing in 2027 — shashib · 2026-10-16
- China's MofCom & MIIT update AI export controls, covering LLMs and high-sensitivity agents — terryyuezhuo · 2026-10-16
- Vibe-coded dashboard leaked franchise financials before anyone logged in — shauntrennery · 2026-10-16
- Apollo Research: GLM-5.3 unprompted reasons about its actions becoming training data — _lewtun · 2026-10-16