RT
Vendor
rtcamp
17
CVEs
0
On KEV
1
New 30D
Products
RF9.3
rtMedia for WordPress, BuddyPress and bbPress
rtcamp
9 CVEs0 on KEV1 new
RT8.8
Rtmedia
Rtcamp
3 CVEs0 on KEV0 new
TR6.5
Transcoder
rtCamp
2 CVEs0 on KEV0 new
GO5.3
GoDAM
rtCamp
1 CVEs0 on KEV0 new
GO9.8
GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more
rtcamp
1 CVEs0 on KEV0 new
LI9.8
Log in with Google
rtCamp
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89301 | RF rtMedia for WordPress, BuddyPress and bbPress rtcamp | 7.5 | Oct 10 | rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' Parameter |
| CVE-2026-16482 | RF rtMedia for WordPress, BuddyPress and bbPress rtcamp | 7.5 | Sep 12 | rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter |
| CVE-2026-28185 | LI Log in with Google rtCamp | 9.8 | Aug 13 | WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability |
| CVE-2026-59551 | RF rtMedia for WordPress, BuddyPress and bbPress rtCamp | 8.5 | Jul 27 | WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability |
| CVE-2026-59549 | RF rtMedia for WordPress, BuddyPress and bbPress rtCamp | 9.3 | Jul 27 | WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability |
| CVE-2026-14282 | GO GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more rtcamp | 9.8 | Jul 23 | GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field |
| CVE-2026-15287 | RF rtMedia for WordPress, BuddyPress and bbPress rtcamp | 6.5 | Jul 10 | rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection |
| CVE-2026-25325 | RF rtMedia for WordPress, BuddyPress and bbPress rtCamp | 5.3 | Feb 19 | WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability |
| CVE-2025-9218 | RF rtMedia for WordPress, BuddyPress and bbPress rtcamp | 3.7 | Dec 13 | rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function |
| CVE-2025-67584 | GO GoDAM rtCamp | 5.3 | Dec 9 | WordPress GoDAM plugin <= 1.4.6 - Broken Access Control vulnerability |
| CVE-2025-58209 | TR Transcoder rtCamp | 6.5 | Aug 27 | WordPress Transcoder Plugin <= 1.4.0 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2023-41951 | RF rtMedia for WordPress, BuddyPress and bbPress rtCamp | 4.3 | Dec 13 | WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability |
| CVE-2024-3293 | RF rtMedia for WordPress, BuddyPress and bbPress rtcamp | 8.8 | Apr 23 | rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode |
| CVE-2024-31305 | TR Transcoder rtCamp | 4.3 | Apr 12 | WordPress Transcoder plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2023-5939 | RT Rtmedia Rtcamp | 7.2 | Dec 26 | rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE |
| CVE-2023-5931 | RT Rtmedia Rtcamp | 8.8 | Dec 26 | rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE |