Rank Math WordPress plugin accused of silently creating admin credentials without user consent
Reported by Eric Mandell
65
News
TLDR
Rank Math is accused of automatically creating administrator-level Application Passwords in WordPress without user knowledge or consent when the Help & Support section is accessed.
The developer of The SEO Framework plugin alleged that Rank Math creates WordPress Application Passwords with administrator-level access whenever a user opens the plugin's Help & Support section, with no explicit consent or user notification. The credentials are tied to the user opening the Help & Support area, raising concerns about unauthorized access and data security for site administrators relying on the tool.
Was this useful?