Rank Math Supply Chain Attack Hits WordPress

By Editorial Team | October 23, 2026
Rank Math supply chain attack CVE-2026-111862: backdoored PRO plugin update 3.0.123, October 2026

A Rank Math supply chain attack put malware into the premium plugin’s update channel: version 3.0.123 of Rank Math PRO, downloaded or updated between October 15 (20:02 UTC) and October 16 (07:12 UTC), contained a backdoor. The window lasted about 11 hours. The vendor’s clean build is 3.0.124, and the free plugin from WordPress.org is…

Read More

Adobe Commerce Magento RCE Vulnerability Under Attack

By Editorial Team | September 10, 2026
Adobe Commerce Magento RCE Vulnerability Under Attack

An Adobe Commerce Magento RCE vulnerability nicknamed StyleSmuggler let attackers plant Rust-based Linux backdoors on live webshops for at least five days before Adobe shipped a fix. Tracked as CVE-2026-75650 with a maximum CVSS score of 10.0, the flaw requires no authentication and has already been used to backdoor real merchant sites, not just proof-of-concept…

Read More