Rank Math has decided to temporarily region their Support Agent because it did not intelligibly pass that the supplier would make credentials that gave it entree to their user’s WordPress website.
Rank Math acknowledged that their support and consent process was not explicit. The thief and support supplier will beryllium reactivated aft the characteristic travel is redesigned to intelligibly inquire for support from the personification earlier credentials are created.
Stumbling First Steps
Rank Math said that the Support Agent was the first portion of a larger scheme to deploy AI agents wrong Rank Math that tin interact straight pinch a user’s WordPress site.
The first intent of the Support Agent was to reply support questions, but it was besides the meant to beryllium the first portion of an Agentic AI deployment that would spot AI agents tin of taking actions connected a tract connected behalf of users, taxable to the permissions granted to them.
Read-Only Access
The support supplier operated successful a read-only capacity for the intent of answering questions wrong the discourse of the website itself. The measurement it was expected to activity was wrong the workflow of a personification opening the Help and Support section, Rank Math creates WordPress Application Password credentials (with definitive personification permission), the AI supplier gains entree to place applicable website accusation which tin past connection contextually applicable answers to support questions.
The volition of the thief and support supplier was to thief users but the characteristic ended up enraging users because nary of that was intelligibly explained beforehand nor was support for the credentials asked beforehand. Rank Math owned up to that error.
Their blog post connected the matter owns up to their error:
“When an AI supplier is being fixed support to create an exertion password, you should beryllium told intelligibly and straight what is happening and what you’re allowing.
That feedback is fair, and we return work for making this clearer. That’s why we’ve temporarily paused the Support Agent while we rebuild the access-request flow.”
Rank Math explained that the passwords were unafraid and named 4 information features:
- Credentials were encrypted.
- Rank Math says the credentials were not stored aliases persisted connected its side.
- The supplier inherited the permissions of the existent WordPress personification alternatively than gaining greater privileges.
- The Support Agent was read-only and could not modify the WordPress site.
Support Agent Is Returning
Rank Math confirmed that the Help and Support supplier is returning but this clip it will explicate up of clip successful “plain language” what they are asking for earlier immoderate credentials are requested.
Featured Image by Shutterstock/Nicoleta Ionescu
English (US) · 
Indonesian (ID) · 
