On August 28, 2026, Sybre Waaijer, the developer behind The SEO Framework, posted a thread on X that lit the WordPress community on fire. He revealed that Rank Math, one of the most popular SEO plugins running on over four million WordPress sites, had introduced a feature that silently created WordPress Application Passwords with administrator-level permissions. The trigger was absurdly simple: a user opening the plugin's Help & Support section.

That is it. No consent dialog. No checkbox. No notification. Open the help tab while connected to a free Rank Math account, and the plugin generates an Application Password tied to your admin user, sends it to group.one's servers, and gives their AI support agent full read access to your site. Closing the tab does not revoke the password. There is no expiration. You cannot turn the feature off.

How the backdoor worked

The mechanism was not a hack in the traditional sense. WordPress Application Passwords are a legitimate core feature designed to let third-party services authenticate with your site through revocable, per-application credentials. The WordPress documentation explicitly states that Application Passwords should be individually revocable and that users should be shown an authorization screen before any password is generated.

Rank Math skipped all of that. According to Waaijer's analysis of the code in version 1.0.277, the file vendor/groupone/wap-client/includes/class-app-password-manager.php handled the credential generation. When a connected user opened Help & Support, the plugin immediately created the password and transmitted it to group.one's servers before the Terms & Conditions box even appeared. The password showed up in the user's profile as "WAP - Rank Math Support Agent" with no expiration date.

The permissions inherited whatever the current user had. If you were an administrator, the support agent got administrator access. Rank Math later claimed the agent operated in read-only mode and could not modify sites, but the Application Password itself carried the full permission set of the user who triggered it. That distinction matters. A read-only intent does not override WordPress's permission model.

The fallout was immediate

Users were furious. The reaction across WordPress forums, X, and developer communities was uniformly negative. Multiple users reported that Rank Math deleted complaints from their support forums. The plugin's WordPress.org review section saw a wave of one-star reviews. Competitors like Yoast and The SEO Framework saw a spike in interest from users looking to switch.

Roger Montti at Search Engine Journal covered the story in two separate articles, tracking the initial discovery and Rank Math's response. The coverage painted a picture of a company that was not prepared for the backlash and scrambled to manage it.

WordPress.org's own plugin guidelines are unambiguous on this point. Guideline 7 states that plugins may not contact external servers without "explicit and authorized consent," requiring an opt-in method. The Application Password specification includes an authorization screen where the user must approve the connection before the credential is generated. Rank Math bypassed both of these requirements.

Rank Math's response

On August 31, Rank Math paused the Support Agent feature and published a blog post acknowledging the problem. Their statement was direct: "When an AI agent is being given permission to create an application password, you should be told clearly and directly what is happening and what you're allowing. That feedback is fair, and we take responsibility for making this clearer."

They outlined four security claims about how the feature operated: credentials were encrypted, passwords were not stored on Rank Math's servers, the agent inherited user permissions rather than escalating them, and the agent was read-only. None of these claims address the core problem, which is that the feature operated without consent.

Rank Math also confirmed that the Support Agent was the first piece of a larger plan to deploy AI agents within Rank Math that could take actions on sites on behalf of users. The Support Agent was supposed to be the read-only foundation for that system. They said the feature would return after the access-request flow was redesigned to ask for explicit permission.

What you should do right now

If you use Rank Math and you have ever opened the Help & Support section while connected to a rankmath.com account, you need to check your Application Passwords. Go to WP Admin, then Users, then your Profile, then Application Passwords. Revoke anything that starts with "WAP -". Do it now. The password does not expire on its own and closing the help tab does not remove it.

While you are there, audit all your Application Passwords. Most WordPress sites have no reason to have any active Application Passwords unless you are intentionally using the REST API with external services. If you see credentials you do not recognize, revoke them.

The bigger picture for WordPress security

This incident happened the same week WordPress announced its new Core Security Initiative, a three-part plan to make security releases faster, clear the backlog of known vulnerabilities, and use AI proactively to find security issues before attackers do. The timing is not coincidental. AI is lowering the barrier for both building tools and exploiting them.

The Rank Math situation is a preview of a problem that is going to get worse. As plugin developers race to add AI features, the temptation to skip consent flows and grab credentials for "helpful" agents will only grow. Four million sites trusting a single plugin means a single bad decision has blast radius that would have been unthinkable a few years ago.

For site owners, the lesson is simple. Audit your plugins regularly. Check your Application Passwords. And if a plugin's help section asks you to connect an account, ask yourself what data that connection gives access to before you click. The era of trusting plugins because they are popular is over. Popular just means more targets.

Sources: Search Engine Journal - Rank Math WordPress Plugin Accused Of Secretly Taking Admin Access, Search Engine Journal - Rank Math SEO Plugin Pauses Controversial Feature