Latest Update

Hello @katie-larking

Thank you for contacting the support.

It seems like you received the email on 26th March. Can you please confirm if you updated the plugin to the latest version at that time?

If so, then your site wasn’t hacked because of the Rank Math plugin as the exploit was made public on 31st March by the researcher.

Please confirm so we can assist you better.

Looking forward to helping you.

Hello,

We are sorry that this happened. We sent out an urgent email requesting everyone to update.

If you want we can take a closer look and fix any issues that might still be there.

Let us know. Looking forward to helping you.

Thank you.

Hello,

Sure. Here are the same steps that we recommend. Please keep Rank Math disabled and follow these steps:
0. Take a complete backup of your site
https://wordpress.org/support/article/wordpress-backups/

1. Update all your plugins and themes to the latest version.

1.1 Optionally, opt for an auto-update by following this tutorial:
https://rankmath.com/kb/version-control/#auto-update

2. Update WordPress to the latest version and reinstall it.

3. Please enable the Rank Math plugin and if you have Rank Math’s redirection module active then re-check if all the redirections are correct here:

If not, then please delete the ones you do not recognize

3.1 Please make sure there are no unauthorized users registered on your website.
/wp-admin/users.php

3.2 Check the menu items and the links inside them and remove any unwanted links:

4. Install a malware scanner like Sucuri or WordFence and run a scan for checking if there are any suspicious files on your server. If you find any, remove them all. You can disable/remove them afterwards.

5. Follow these setup tutorials to confirm if the settings are correct:
https://youtu.be/dTvZuMRzW4w
and
https://www.wpmediamastery.com/rank-math-seo/?utm_campaign=Rank+Math

6. Optional: We would recommend using Cloudflare if not already

7. If that doesn’t help, your site could be hacked due to one of the plugins listed here
https://www.webarxsecurity.com/wordpress-vulnerability-news-march-2020/

8. In that case, please ask your hosting to run a malware scanner and remove any unwanted files from the server. Change the password of all the users on your website. Change the salt keys on your website. Finally, follow these security measures:
https://mythemeshop.com/blog/wordpress-security-tips/

Hope that helps. If you need any further assistance, please let us know.

We are here to help.