https://www.bleepingcomputer.com/news/security/critical-wordpress-plugin-bug-lets-hackers-turn-users-into-admins/
ref 200k installations https://wordpress.org/plugins/seo-by-rank-math/
origin - https://www.pipiscrew.com/?p=17847 critical-wordpress-seo-plugin-lets-hackers-turn-users-into-admins