Skip to content
AI-Assisted Content6 min read

Rank Math Quietly Provisioned Admin Access to 4 Million WordPress Sites

The Credential Was Already There

August 28, Sybre Waaijer — developer of The SEO Framework — posted a thread that landed hard in WordPress circles. His claim: Rank Math version 1.0.277, released the same week it patched roughly a dozen security vulnerabilities, also introduced a feature that creates a persistent WordPress Application Password tied to any administrator who opens the plugin's Help & Support panel. That password inherits full administrator permissions. It gets transmitted to servers operated by group.one — the parent company behind both Rank Math and WP Rocket — before any consent dialog appears on screen.

Search Engine Journal confirmed the allegation on August 30. The credential appears in your WordPress user profile under Application Passwords as WAP – Rank Math Support Agent. It does not expire. Closing the browser tab does not revoke it. Rank Math runs on over 4 million active sites.

What the Plugin Actually Does

Waaijer traced the behavior to a single file inside version 1.0.277: vendor/groupone/wap-client/includes/class-app-password-manager.php. When an administrator whose site is connected to a free rankmath.com account visits the Help & Support section, that file generates a WordPress Application Password and dispatches it to group.one's infrastructure so their AI support agent can operate on the site's behalf.

The mechanical problem is scope. WordPress Application Passwords carry no capability restrictions — they are not limited to reading content or submitting support tickets. A credential created this way inherits whatever permission level the triggering user holds. For site administrators, that means the external system can install and activate plugins, create new admin accounts, modify content, and change site settings. Waaijer noted the access is technically sufficient for remote code execution if a plugin like WPCode is subsequently installed through that Application Password.

The Consent Problem Is the Core Issue

Rank Math included a Terms & Conditions checkbox in the support interface. The issue Waaijer documented is sequencing: the Application Password is created and the credential is transmitted to group.one's servers before that checkbox is presented to the user. The transfer starts before the box even appears.

WordPress plugin guidelines are specific here. The official developer documentation requires that Application Passwords only be passed to a plugin after explicit user approval through an authorization screen. The guideline for external server contact requires opt-in consent. The Rank Math implementation, as documented, inverts that sequence.

Rank Math released version 1.0.277.1 on August 27 — listed on WordPress.org as fixing an issue involving the Help & Support AI Assistant and Application Passwords when Application Passwords had been disabled at the site level. The credential behavior in connected accounts where Application Passwords remain enabled is the question that persisted after that patch.

The Scale Creates a Supply-Chain Risk

Four million active installations is not a number that stays niche. Even if group.one's intentions are entirely benign, their servers now hold a collection of administrator credentials spanning millions of WordPress sites. That collection is itself a target. A centralized system that can authenticate to millions of sites is a far more attractive objective for a malicious actor than attacking individual installations one by one. The 2026 OptinMonster and ShapedPlugin supply-chain attacks targeted plugin infrastructure for exactly this reason — the attacker does not need to compromise millions of sites individually when the infrastructure connecting them can be compromised once.

Rank Math's security record adds context without resolving the current concern. The plugin accumulated seven disclosed vulnerabilities in 2024, four in 2025, and three so far in 2026, including a recent unauthenticated stored cross-site scripting issue. That volume is not unusual for a plugin at this scale — it is a plugin that patches actively. The specific concern here is not a vulnerability in the traditional sense. It is a deliberate feature with a consent-sequencing gap and a persistence model site owners were not informed about.

What to Check Right Now

This takes about two minutes per site. No additional plugin required.

  1. Log into WP Admin on the affected site.
  2. Go to Users and open the profile of any account with the Administrator role.
  3. Scroll to the Application Passwords section.
  4. Look for any entry whose name begins with WAP – — specifically WAP – Rank Math Support Agent.
  5. Revoke it.

Repeat this check on every administrator-level account on the site, not just the primary admin. The credential is created by whoever opens the Help & Support panel, so multiple accounts may have generated separate entries independently.

Running version 1.0.277.1 still makes sense — that release also closed roughly a dozen security issues. Rolling back to avoid the Application Password behavior would mean rolling back past those fixes. Revoke the credential rather than downgrade the plugin.

What This Means for WordPress Content Teams

Teams running WordPress content automation workflows — scheduled AI drafts, category management, editorial review pipelines — operate under the assumption that their plugin stack has a defined and deliberate permission model. The Rank Math situation is a clean example of why that assumption requires auditing, not trust.

The WPForms Lite situation that surfaced in July 2026 raised the same structural question from a different angle: an onboarding wizard that briefly passed an admin session token to an external application server during setup. WPForms handled it with a temporary token. Rank Math's Application Password persists indefinitely until someone manually revokes it. The contrast with WPForms' separate AI write-access system is instructive — that system is off by default, requires an administrator to explicitly enable it, and limits scope to specific form operations.

For any team managing AI-assisted content publishing on WordPress, the Application Passwords screen under each user profile is now a routine audit item. Not because Rank Math is uniquely malicious. Because the screen now contains something nobody explicitly put there.

FAQ

Does revoking the credential break Rank Math's core functionality? No. Removing the WAP – Rank Math Support Agent entry cuts off the external AI support agent's programmatic access to your site. It does not affect keyword analysis, schema markup, sitemap generation, or any of the plugin's standard SEO features. If you later open the Help & Support panel while connected to a rankmath.com account, the credential may be recreated.

Is this officially classified as a backdoor? Waaijer himself declined to apply that label definitively. Search Engine Journal published the allegations on August 30 with no public statement from Rank Math. The documented concern is a consent-sequencing problem combined with a non-expiring persistence model. Whether the backdoor label fits is a framing question. The remediation step is the same regardless.

What if Application Passwords are disabled site-wide? Rank Math 1.0.277.1 addressed the behavior specifically for sites where Application Passwords have been globally disabled. Sites with Application Passwords turned off at the infrastructure level are not affected by this issue. WordPress allows disabling the feature by adding add_filter('wp_is_application_passwords_available', '__return_false'); to functions.php — a setting some security-conscious teams already have in place.

Sources: