Rank Math pauses controversial WordPress plugin feature

Rank Math has temporarily paused its Support Agent feature following controversy regarding how it handles user permissions. The plugin, which is used on over 4 million WordPress sites, was accused of generating WordPress Application Passwords without explicit user consent.

Reports indicated that when a site administrator accessed the plugin’s Help & Support section, the software would create credentials that granted an AI agent access to the website. While the company stated the agent was intended to operate in a read-only capacity to provide contextually relevant support, critics argued the lack of clear notification and authorization constituted a security risk.

Rank Math acknowledged that its permission and consent process was not explicit enough. The company stated it will redesign the feature flow to ensure users are clearly asked for permission before any credentials are created. The Support Agent is part of a broader plan to deploy AI agents capable of performing actions on WordPress sites on behalf of users, subject to granted permissions.