What’s Vulnerable › Products

rtcamp rtMedia for WordPress, BuddyPress and bbPress vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your rtcamp rtMedia for WordPress, BuddyPress and bbPress version is affected

Latest rtcamp rtMedia for WordPress, BuddyPress and bbPress vulnerabilities

• CVE-2026-89301 — rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' Parameter (CVSS 7.5)
• CVE-2026-16482 — rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter (CVSS 7.5)
• CVE-2026-66592 — WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2026-59551 — WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2026-59549 — WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2026-15287 — rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection (CVSS 6.5)
• CVE-2026-25325 — WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability (CVSS 5.3)
• CVE-2025-9218 — rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function (CVSS 3.7)
• CVE-2023-41951 — WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability (CVSS 4.3)