Rtcamp Rtmedia vulnerabilities

• rtcamp rtmedia for wordpress, buddypress and bbpress rtMedia for WordPress, BuddyPress and bbPress < 4.7.14 - Subscriber+ Arbitrary Album Media Injection via IDOR CVE-2026-88927 4.3 MediumOctober 14, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability CVE-2026-105892 9.8 CriticalOctober 10, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' Parameter CVE-2026-89301 7.5 HighOctober 10, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOR CVE-2026-88912 4.2 MediumSeptember 13, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter CVE-2026-16482 7.5 HighSeptember 12, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability CVE-2026-66592 9.3 CriticalAugust 20, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability CVE-2026-59551 8.5 HighJuly 27, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability CVE-2026-59549 9.3 CriticalJuly 27, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection CVE-2026-15287 6.5 MediumJuly 10, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.9 - Broken Access Control vulnerability CVE-2026-40773 6.5 MediumJune 15, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability CVE-2026-25325 5.3 MediumFebruary 19, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function CVE-2025-9218 3.7 LowDecember 13, 2025
• rtcamp rtmedia for wordpress, buddypress and bbpress WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability CVE-2023-41951 4.3 MediumDecember 13, 2024
• rtcamp rtmedia, rtmedia for wordpress, buddypress and bbpress +1 more rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode CVE-2024-3293 Public exploit 8.8 HighApril 23, 2024
• rtcamp rtmedia, rtmedia for wordpress, buddypress and bbpress +1 more rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE CVE-2023-5939 7.2 HighDecember 26, 2023
• rtcamp rtmedia, rtmedia for wordpress, buddypress and bbpress +1 more rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE CVE-2023-5931 8.8 HighDecember 26, 2023