Rtmedia For Wordpress, Buddypress And Bbpress
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:rtmedia_for_wordpress,_buddypress_and_bbpress:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Rtmedia For Wordpress, Buddypress And Bbpress (68697824-1937-56f4-9a22-b5e64b5fbae4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-88912 |
vulnerable | 2026-09-16 04:34:09.253497 |
rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOR
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.12 does not check ownership before changing the privacy level of an activity and its attached media, relying only on a nonce shared with every logged-in user, allowing users with a subscriber-level account or above to make another user's private activity public or hide it.
Published: 2026-09-13T06:00:09.130Z
Updated: 2026-09-13T10:44:36.100Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5939 |
vulnerable | 2026-06-08 06:19:45.161934 |
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users.
Published: 2023-12-26T18:33:10.220Z
Updated: 2024-08-02T08:14:25.120Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5931 |
vulnerable | 2026-06-08 06:19:45.148630 |
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server
Published: 2023-12-26T18:33:01.473Z
Updated: 2024-08-02T08:14:25.118Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.