Rtmedia For Wordpress, Buddypress And Bbpress
Approved changes feed: RSS · Atom
cpe:2.3:a:rtcamp:rtmedia_for_wordpress,_buddypress_and_bbpress:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rtcamp (bf5c8617-32c4-501a-bc07-d08521215345) |
|---|---|
| Product | Rtmedia For Wordpress, Buddypress And Bbpress (8395204e-97c0-5bb3-aacc-4d347a35da43) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-15287 |
vulnerable | 2026-07-29 00:26:17.949669 |
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection
MEDIUM (6.5)
The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based SQL Injection via the order_by parameter in all versions up to, and including, 4.6.18 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Published: 2026-07-10T04:31:22.580Z
Updated: 2026-07-10T18:03:36.230Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25325 |
vulnerable | 2026-06-08 07:53:19.647616 |
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Retrieve Embedded Sensitive Data.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through <= 4.7.8.
Published: 2026-02-19T08:26:56.293Z
Updated: 2026-04-28T16:14:54.890Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9218 |
vulnerable | 2026-06-08 07:45:21.909455 |
rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function
LOW (3.7)
The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to to Information Disclosure due to missing authorization in the handle_rest_pre_dispatch() function when the Godam plugin is active, in versions 4.7.0 to 4.7.3. This makes it possible for unauthenticated attackers to retrieve media items associated with draft or private posts.
Published: 2025-12-13T04:31:26.133Z
Updated: 2025-12-15T15:47:54.693Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3293 |
vulnerable | 2026-06-08 06:41:52.896421 |
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode
HIGH (8.8)
The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to blind SQL Injection via the rtmedia_gallery shortcode in all versions up to, and including, 4.6.18 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Published: 2024-04-23T01:58:06.837Z
Updated: 2026-04-08T16:45:22.824Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41951 |
vulnerable | 2026-06-08 06:11:07.476874 |
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.6.14.
Published: 2024-12-13T14:24:24.851Z
Updated: 2026-04-28T16:08:39.595Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.