Sorank is the official WordPress connector for the Sorank SEO platform . It connects your site to Sorank so you can generate, schedule, publish, and update SEO-focused articles without copying content between tools. Connect in one click from your WordPress admin. No WordPress password, Application P
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 5.6 and PHP 7.4.
SourceWordPress plugins · Nov 9, 2026
01 / Source details
Aboutthistool.
Sorank is the official WordPress connector for the Sorank SEO platform . It connects your site to Sorank so you can generate, schedule, publish, and update SEO-focused articles without copying content between tools.
Connect in one click from your WordPress admin. No WordPress password, Application Password, or API key needs to be copied into Sorank.
A Sorank account is required. Content generation and planning happen in Sorank. This plugin securely delivers the finished content to your WordPress site.
Features
AI-powered SEO content – Generate articles in Sorank from target keywords, search intent, competitor research, and your business context.
Automatic or draft publishing – Publish directly to WordPress or send articles as drafts for review before they go live.
Content scheduling – Plan your editorial calendar in Sorank and let scheduled articles reach WordPress at the right time.
Complete article delivery – Send the title, slug, formatted body, inline images, featured image, and WordPress category in one workflow.
SEO metadata – Write SEO titles, meta descriptions, and focus keywords for Yoast SEO and Rank Math.
Update existing articles – Push Sorank edits to an already published WordPress article without creating a duplicate. When Sorank shortens a URL (for example by removing an outdated year), WordPress redirects the old URL.
SEO audit fixes – Apply the fixes you approve in Sorank (SEO title, meta description, canonical, noindex, structured data, images and links) to existing posts, including posts built with Elementor. Only the approved fields change, and posts edited in WordPress meanwhile are never overwritten.
Publish status control – Move connected articles between draft and published status from Sorank.
Theme and builder compatibility – Preserve rendering for Elementor, Elementor Pro Theme Builder, OceanWP, and standard WordPress themes.
Secure one-click connection – Pair your site without sharing your WordPress credentials or manually creating an API key.
01Install and activate the Sorank plugin from WordPress.org.
02Open the new Sorank menu in your WordPress admin and click Connect to Sorank .
03Authorize the site in your Sorank account. No API key needs to be copied.
04Generate or schedule an article in Sorank and choose whether it should be published immediately or saved as a draft.
05Sorank sends the article, images, category, and SEO metadata directly to your site. Future edits can update the same WordPress post.
Built for Reliable WordPress Publishing
Sorank publishes through a dedicated /wp-json/sorank/v1/* REST namespace instead of relying on the standard post endpoints. This keeps the integration isolated and avoids common conflicts with security layers that heavily restrict /wp-json/wp/v2/* .
Each publishing request is authenticated with an encrypted bearer token created during pairing. The plugin can receive an article and its images in a single request, reducing partial publications and synchronization errors.
Security
Connection and settings actions require a WordPress administrator and are protected by WordPress nonces.
Pairing uses a state value and PKCE-style code verification to prevent intercepted authorization codes from being reused.
The Sorank access token is encrypted with AES-256-CBC using a random secret generated for this WordPress installation.
Every Sorank REST request must present the valid bearer token, which is compared using hash_equals .
Disconnecting removes the local token. Uninstalling removes all Sorank plugin options and temporary pairing data.
External Services
This plugin connects to Sorank (https://www.sorank.com), an SEO SaaS that publishes articles to your site. The connection is required for the plugin to function: without it, the Connect button cannot pair your site and no articles can be published.
Sorank pairing exchange
When you click Connect to Sorank in the WordPress admin, your browser is redirected to https://app.sorank.com/integrations/wordpress/pair with the following query parameters: your site URL, a random state nonce, a PKCE code_challenge , the plugin version, and a return_url pointing back to your WordPress admin.
After you authorize the pairing in Sorank, your browser is redirected back to your WordPress admin with a pairing_code and state . The plugin then makes a server-to-server POST request to https://app.sorank.com/api/v1/cms-integrations/wordpress-plugin/exchange containing your site URL, the pairing code, the state nonce, the PKCE code verifier, and the plugin version. Sorank responds with a long-lived bearer token and the email address of the Sorank account that authorized the pairing.
Sorank disconnect notification
When you click Disconnect in the WordPress admin, the plugin makes a best-effort POST request to https://app.sorank.com/api/v1/cms-integrations/wordpress-plugin/notify-disconnect containing your site URL and the bearer token. The plugin then deletes the local copy of the token regardless of whether Sorank could be reached.
No other outbound calls
The plugin does not send analytics, telemetry, error reports, or any other data to Sorank or to any third party. All other Sorank communications are inbound (Sorank calling your site’s /wp-json/sorank/v1/* routes with a bearer token).
Terms and privacy
Sorank Terms of Use: https://www.sorank.com/terms-of-use Sorank Privacy Policy: https://www.sorank.com/privacy-policy
Privacy
The plugin stores the following on your WordPress site:
sorank_access_token : the bearer token issued by Sorank during pairing, encrypted at rest.
sorank_encryption_secret : a random 256-bit secret generated at first pairing and used to encrypt the access token. Never leaves the site.
sorank_authkey_fingerprint : a one-way SHA-256 fingerprint of AUTH_KEY taken at install time. Used to detect (and report anonymously to Sorank) whether a security plugin rotated your salts, since salt rotation was the leading cause of disconnections before 2.0.5. The first 8 hex characters of the fingerprint are anonymized for the diagnostic.
sorank_connected_email : the email address of the Sorank account that authorized the pairing.
sorank_connected_site_url : the site URL recorded at pairing time.
sorank_connected_at : the Unix timestamp of the pairing.
sorank_paired_user_id : the ID of the WordPress administrator who connected the site (for a single site connected before 2.3.0, the first administrator allowed to save unfiltered HTML who opens the WordPress admin); Sorank writes run with that user’s capabilities. Removed on disconnect.
sorank_theme_builder_compat : the on/off value of the Elementor Theme Builder compatibility option.
sorank_generated_layout_repair and sorank_generated_layout_repair_offset : progress of the one-time conversion of articles published earlier as an Elementor layout back into standard posts.
Short-lived transients prefixed with sorank_pairing_ containing the PKCE verifier during an in-progress pairing (auto-expire after 10 minutes).
All of these are removed when the plugin is uninstalled through the standard WordPress uninstall flow.
The plugin does not set cookies and does not track site visitors.
02 / Source details
Gettingstarted.
01Sign up for a free Sorank account at https://www.sorank.com if you do not already have one.
02Install the plugin from the WordPress.org plugin directory or by uploading the ZIP archive from your WordPress admin.
03Activate the plugin.
04In your WordPress admin, click the new Sorank menu in the sidebar.
05Click Connect to Sorank . You will be redirected to Sorank to authorize this WordPress site.
06After authorization, you are redirected back to your WordPress admin and the page now shows Connected .
07In your Sorank dashboard, pick the WordPress site you just connected as a publishing destination.
03 / Source details
Frequently asked questions.
Do I need a Sorank account?
Yes. This plugin is a connector to the Sorank SEO platform. Without a Sorank account, the Connect button cannot complete the pairing. You can create a free account at https://www.sorank.com.
Does the plugin store my password?
No. The pairing flow never transmits your WordPress password to Sorank. Sorank only receives a bearer token issued specifically for this connection. The local copy is encrypted with a random per-install secret stored in your WordPress database with autoload disabled.
How do I disconnect?
Two options:
In your WordPress admin, open the Sorank page and click Disconnect . The plugin notifies Sorank and deletes the stored token.
In your Sorank dashboard, open the WordPress integration and click Disconnect . Sorank notifies the plugin and the token is removed from your site.
If your WordPress site is temporarily unreachable when Sorank tries to disconnect, Sorank still removes the integration from its side; the stored token on your WordPress site can be deleted by clicking Disconnect again from the Sorank admin page once your site is back online.
I see “Could not encrypt the Sorank token”
This means PHP’s openssl extension or random_bytes function is unavailable on your host. Check with your hosting provider that the OpenSSL extension is enabled. If you previously upgraded from 2.0.4 or earlier and your AUTH_KEY was empty, paste a fresh set of keys from https://api.wordpress.org/secret-key/1.1/salt/ into wp-config.php and try pairing again.
Why does the plugin keep disconnecting every few days?
Pre-2.0.5 versions of the plugin encrypted the token with a key derived from your site AUTH_KEY . Some security plugins (iThemes Security, Wordfence, …) rotate the WordPress salts on a schedule, which made the encrypted token unreadable and forced you to re-pair. Update to 2.0.5+ to switch to a per-install secret that survives salt rotations. After updating, your existing token is migrated transparently on the next API call; no action required.
Sorank says my site is connected, but publishing fails with “Missing Authorization header.”
Some hosts (typically Apache running PHP as CGI/FastCGI) remove the standard HTTP Authorization header before WordPress can read it. Pairing still succeeds, but every request Sorank sends afterwards is rejected, so disconnecting and reconnecting does not help.
01Update the Sorank plugin to version 2.1.5 or later. Sorank also sends the token in an X-Sorank-Authorization header, which these hosts forward, so no server change is needed.
02If it still fails, add this line at the top of the .htaccess file at the root of your WordPress site, above # BEGIN WordPress : SetEnvIf Authorization “(.*)” HTTP_AUTHORIZATION=$1
03If you cannot edit .htaccess (for example on Nginx or managed hosting), send this to your hosting support: “Please forward the HTTP Authorization header to PHP for requests to /wp-json/ on my site (for example with CGIPassAuth On, or SetEnvIf Authorization “(.*)” HTTP_AUTHORIZATION=$1 on Apache). The Sorank plugin uses it to authenticate publishing requests.”
Sorank cannot sync categories or publish on a site protected by All-In-One Security (AIOS)
AIOS’s “Disallow unauthorized REST requests” option rejects every REST request that does not come from a logged-in WordPress user, including Sorank’s server-to-server calls. Since version 2.1.6 the plugin adds its sorank/v1 routes to the AIOS REST allow-list automatically, so you can keep that option enabled. Every Sorank route still requires the Sorank access token. Update the plugin, then retry from Sorank.
My SEO meta description / focus keyword is empty after publishing
The plugin writes both Yoast SEO and Rank Math meta keys on every publish, but you need the corresponding SEO plugin (Yoast or Rank Math) to be active and at least one of them to be selected in your Sorank publishing settings.
Does the plugin work with Elementor?
Yes. The plugin includes Elementor compatibility: published posts render correctly both on Elementor-powered blog pages and on sites using Elementor Pro Theme Builder “Single Post” templates. The plugin detects a “Single Post” template and lets it display Sorank articles; the Elementor Theme Builder compatibility option on the Sorank settings page applies the same behavior when no template is detected. SEO audit fixes you approve in Sorank also apply inside the text, heading and image widgets of posts built in the Elementor editor, without changing their other widgets or styles.
Does the plugin send anything when I am not publishing?
No. Outbound calls to Sorank only happen during pairing (initiated by you) and disconnect (initiated by you). Article publishing requests are inbound calls from Sorank to your site, not the other way around.
FinderPress Media Auditor helps site administrators scan for broken images, missing Media Library files, unreachable media URLs, and other media issues across WordPress content. Use it to audit images, video, audio, PDFs, featured images, and attachment files without sending scan data to an external
The Accepted Payment Methods plugin is a straightforward, lightweight solution that enhances your website by displaying visually appealing icons of the payment methods you accept. This plugin is ideal for a variety of websites, including e-commerce platforms, service-oriented websites, and informati
