Rank Math PRO WordPress plugin compromised in supply chain attack

SecurityWeek reports that some Rank Math PRO 3.0.123 packages downloaded or updated between October 15 at 20:02 UTC and October 16 at 07:12 UTC contained malware. Citing Rank Math, it says users who installed and activated that version during the window should treat their sites as compromised and restore a pre-incident backup. Rank Math says it released a clean version, 3.0.124.