Rank Math Pauses Its AI Support Agent Over WordPress Access Taken Without Asking

Rank Math, an SEO plugin that runs on more than four million WordPress sites, has paused an AI Support Agent it added in version 1.0.277, after the feature was shown to create a WordPress Application Password and send it to external servers without clearly asking the user first. Rank Math says it took responsibility for the unclear consent process and will bring the feature back once it has rebuilt the way it requests access.

The allegation came from Sybre Waaijer, the developer of the competing plugin The SEO Framework, who posted a breakdown of what the update did. Rank Math’s own blog post confirms the core of it: the agent created application-password credentials, and it did so without explaining clearly what was happening.

How the Support Agent gained access

Waaijer’s account is specific. When a site administrator whose site is connected to a free rankmath.com account opened the plugin’s Help & Support section, Rank Math created a WordPress Application Password tied to that user and sent it to servers run by group.one, which also owns the WP Rocket plugin. An AI agent could then use that credential to act on the site on the user’s behalf.

Application Passwords are a standard part of WordPress core, and a credential created this way inherits the permissions of the user who triggered it. So where the person clicking through the plugin’s admin area was an administrator, the password Rank Math generated carried administrator-level access. Waaijer stopped short of calling it a backdoor, writing “Last time, I classified something like this as a backdoor. This time, you may decide.”

His main objection was consent. WordPress’s own Application Password flow is built around an authorisation screen: the plugin identifies itself, the user sees the request, and the password is only handed over once the user approves it. Waaijer says Rank Math skipped that step. There was a terms-and-conditions box, he says, but it did not stop the password being created, and “the transfer starts before the box even appears”. WordPress.org’s plugin guidelines also require explicit, opt-in consent before a plugin contacts external servers.

What Rank Math disputes and what it concedes

Rank Math frames the feature as the first step of a wider plan to run AI agents inside the plugin, starting with a read-only agent that answers support questions using context from the site itself. It concedes the presentation was wrong: “When an AI agent is being given permission to create an application password, you should be told clearly and directly what is happening and what you’re allowing. That feedback is fair, and we take responsibility for making this clearer.”

On the security of the credentials, Rank Math pushes back on the worst reading. It says the passwords were encrypted, were not stored or persisted on its side, inherited the current user’s permissions rather than gaining greater ones, and that the agent was read-only and could not modify the site. Those points narrow the exposure, but they do not answer the consent objection, which is the part Rank Math has agreed to fix. The company says the Support Agent will return once the flow asks, in “plain language”, before any credentials are created.

What Rank Math users should check now

If you run Rank Math and opened its Help & Support section while connected to a Rank Math account, treat it as though an application password may have been created for your user. In wp-admin, open Users, edit your profile, and review the Application Passwords section near the bottom: revoke anything you do not recognise or did not create yourself. Update the plugin to the current version, where the feature is paused, and keep it updated for the redesigned consent flow.

The wider point outlives this one plugin. Agentic features are arriving inside the tools SEOs already run, and they need site credentials to act. A plugin asking to create an application password is not automatically wrong, but it should show you the request and wait for a clear yes before anything is issued. When it does not, the safe assumption is that access was granted, and the safe response is to check.

Sources

• Rank Math SEO Plugin Pauses Controversial Feature. Says It Will Return - Search Engine Journal
• Rank Math WordPress Plugin Accused Of Secretly Taking Admin Access - Search Engine Journal
• Support Agent Paused Temporarily - Rank Math
• Sybre Waaijer’s thread on the update - X
• Application Passwords Integration Guide - WordPress core