Rank Math Plugin Accused of Secretly Grabbing Admin Access
gaganghotra_ · x · 2026-08-31
WordPress SEO plugin Rank Math is accused of silently creating WordPress Application Passwords and sending admin privileges to group.one servers when users open the Help & Support section. This grants the company's AI agent potential control over user sites. The plugin runs on over 4 million sites, and rival developers have labeled the behavior a potential backdoor.
More from Safety
- Research reveals Azure IMDS allows single-command subscription takeover — cyb3rops · 2026-08-31
- Debate on AI Speed vs. Human Control and Agency — soumitrashukla9 · 2026-08-31
- Study: Amazon flooded with AI books crowding out human authors — TuhinChakr · 2026-08-31
- Chollet on AI bio-risks: not panic, but take proliferation seriously — fchollet · 2026-08-31
- OpenAI's agent file-write timeline under scrutiny: technical report contradicts Black Hat talk — sjgadler · 2026-08-31
- OpenAI Tech Report Contradicts Black Hat Talk on Agent File Uploads — sjgadler · 2026-08-31