What’s Vulnerable › Products

rtMedia for WordPress, BuddyPress and bbPress vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your rtMedia for WordPress, BuddyPress and bbPress version is affected

Latest rtMedia for WordPress, BuddyPress and bbPress vulnerabilities

• CVE-2026-88927 — rtMedia for WordPress, BuddyPress and bbPress < 4.7.14 - Subscriber+ Arbitrary Album Media Injection via IDOR (CVSS 4.3)
• CVE-2026-88912 — rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOR (CVSS 4.2)
• CVE-2024-3293 — rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode (CVSS 8.8)
• CVE-2023-5939 — rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE (CVSS 7.2)
• CVE-2023-5931 — rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE (CVSS 8.8)