RF
Product
rtMedia for WordPress, BuddyPress and bbPress
8
CVEs
0
On KEV
9.3
Max CVSS
1
New 30D
Severity mix
Critical 1High 3Medium 3Low 1
Watch
Add rtMedia for WordPress, BuddyPress and bbPress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59549 | 9.3 | Jul 27 | WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability Affected: through 4.7.10 |
| CVE-2026-59551 | 8.5 | Jul 27 | WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability Affected: through 4.7.10 |
| CVE-2026-89301 | 7.5 | Oct 10 | rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' Parameter Affected: through 4.7.13 |
| CVE-2026-16482 | 7.5 | Sep 12 | rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter Affected: through 4.7.11 |
| CVE-2026-15287 | 6.5 | Jul 10 | rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection Affected: through 4.6.18 |
| CVE-2026-25325 | 5.3 | Feb 19 | WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability Affected: through 4.7.8 |
| CVE-2023-41951 | 4.3 | Dec 13 | WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability Affected: through 4.6.14 |
| CVE-2025-9218 | 3.7 | Dec 13 | rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function Affected: 4.7.0 through 4.7.3 |
Showing 8