Advisories · Technology

rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress.

Every CVE that names rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-105892 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability
- rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress
- Path traversal
Not analysed yet 10 Oct 2026
CVE-2026-66592 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability
- rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress
- SQL injection
Not analysed yet 20 Aug 2026
CVE-2026-40773 CVE record

CVSS 6.5 Medium

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.9 - Broken Access Control vulnerability
- rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress
- Broken access control
Not analysed yet 15 Jun 2026