Login Request a demo
RF
Product
rtMedia for WordPress, BuddyPress and bbPress
by rtcamp · last CVE Oct 10, 2026
9
CVEs
0
On KEV
9.3
Max CVSS
1
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 4Medium 3Low 1
Severity
All severities9Critical1High4Medium3Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add rtMedia for WordPress, BuddyPress and bbPress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-3293
8.8
1%
Apr 23
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode
Affected: through 4.6.18
CVE-2026-59551
8.5
0%
Jul 27
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability
Affected: through 4.7.10
CVE-2026-89301
7.5
0%
Oct 10
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' Parameter
Affected: through 4.7.13
CVE-2026-16482
7.5
1%
Sep 12
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter
Affected: through 4.7.11
Showing 4