# rtcamp rtMedia for WordPress, BuddyPress and bbPress.

Every CVE that names rtcamp rtMedia for WordPress, BuddyPress and bbPress among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files\[tmp_name\]' Parameter](https://agentprime.io/advisories/CVE-2026-89301.md)
  `CVE-2026-89301` · CVE record: rtcamp rtMedia for WordPress, BuddyPress and bbPress · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2026 · Tags: Broken access control
- [rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter](https://agentprime.io/advisories/CVE-2026-16482.md)
  `CVE-2026-16482` · CVE record: rtcamp rtMedia for WordPress, BuddyPress and bbPress · CVSS 7.5 High · Not analysed yet · Published 12 Sept 2026 · Tags: SQL injection
- [WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-59551.md)
  `CVE-2026-59551` · CVE record: rtCamp rtMedia for WordPress, BuddyPress and bbPress · CVSS 8.5 High · Not analysed yet · Published 27 Jul 2026 · Tags: SQL injection
- [WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-59549.md)
  `CVE-2026-59549` · CVE record: rtCamp rtMedia for WordPress, BuddyPress and bbPress · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jul 2026 · Tags: SQL injection
- [rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection](https://agentprime.io/advisories/CVE-2026-15287.md)
  `CVE-2026-15287` · CVE record: rtcamp rtMedia for WordPress, BuddyPress and bbPress · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: SQL injection
- [WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability](https://agentprime.io/advisories/CVE-2026-25325.md)
  `CVE-2026-25325` · CVE record: rtCamp rtMedia for WordPress, BuddyPress and bbPress · CVSS 5.3 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Information disclosure
- [rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function](https://agentprime.io/advisories/CVE-2025-9218.md)
  `CVE-2025-9218` · CVE record: rtcamp rtMedia for WordPress, BuddyPress and bbPress · CVSS 3.7 Low · Not analysed yet · Published 13 Dec 2025 · Tags: Broken access control
- [WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2023-41951.md)
  `CVE-2023-41951` · CVE record: rtCamp rtMedia for WordPress, BuddyPress and bbPress · CVSS 4.3 Medium · Not analysed yet · Published 13 Dec 2024 · Tags: Broken access control
- [rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode](https://agentprime.io/advisories/CVE-2024-3293.md)
  `CVE-2024-3293` · CVE record: rtcamp rtMedia for WordPress, BuddyPress and bbPress · CVSS 8.8 High · Not analysed yet · Published 23 Apr 2024 · Tags: SQL injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=rtcamp-rtmedia-for-wordpress-buddypress-and-bbpress>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/rtcamp-rtmedia-for-wordpress-buddypress-and-bbpress/>. Everything for agents: <https://agentprime.io/llms.txt>.