Skip to content
Rtcamp vulnerabilities
Newest
-
rtcamp rtmedia for wordpress, buddypress and bbpress
rtMedia for WordPress, BuddyPress and bbPress < 4.7.14 - Subscriber+ Arbitrary Album Media Injection via IDOR
CVE-2026-88927
4.3 Medium
-
rtcamp rtmedia for wordpress, buddypress and bbpress
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability
CVE-2026-105892
9.8 Critical
-
rtcamp rtmedia for wordpress, buddypress and bbpress
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' Parameter
CVE-2026-89301
7.5 High
-
rtcamp rtmedia for wordpress, buddypress and bbpress
rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOR
CVE-2026-88912
4.2 Medium
-
rtcamp rtmedia for wordpress, buddypress and bbpress
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter
CVE-2026-16482
7.5 High
-
rtcamp rtmedia for wordpress, buddypress and bbpress
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability
CVE-2026-66592
9.3 Critical
-
rtcamp log in with google
WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability
CVE-2026-28185
9.8 Critical
-
rtcamp rtmedia for wordpress, buddypress and bbpress
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability
CVE-2026-59551
8.5 High
-
rtcamp rtmedia for wordpress, buddypress and bbpress
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability
CVE-2026-59549
9.3 Critical
-
rtcamp godam – organize wordpress media library & file manager with unlimited folders for images, videos & more
GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field
CVE-2026-14282
Public exploit
9.8 Critical
-
rtcamp rtmedia for wordpress, buddypress and bbpress
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection
CVE-2026-15287
6.5 Medium
-
rtcamp rtmedia for wordpress, buddypress and bbpress
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.9 - Broken Access Control vulnerability
CVE-2026-40773
6.5 Medium
-
rtcamp rtmedia for wordpress, buddypress and bbpress
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability
CVE-2026-25325
5.3 Medium
-
rtcamp rtmedia for wordpress, buddypress and bbpress
rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function
CVE-2025-9218
3.7 Low
-
rtcamp godam
WordPress GoDAM plugin <= 1.4.6 - Broken Access Control vulnerability
CVE-2025-67584
5.3 Medium
-
rtcamp transcoder
WordPress Transcoder Plugin <= 1.4.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58209
6.5 Medium
-
rtcamp rtmedia for wordpress, buddypress and bbpress
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability
CVE-2023-41951
4.3 Medium
-
rtcamp rtmedia, rtmedia for wordpress, buddypress and bbpress +1 more
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode
CVE-2024-3293
Public exploit
8.8 High
-
rtcamp transcoder
WordPress Transcoder plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31305
4.3 Medium
-
rtcamp rtmedia, rtmedia for wordpress, buddypress and bbpress +1 more
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE
CVE-2023-5939
7.2 High
-
rtcamp rtmedia, rtmedia for wordpress, buddypress and bbpress +1 more
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE
CVE-2023-5931
8.8 High