Advisories · Technology

rtMedia for WordPress, BuddyPress and bbPress.

Every CVE that names rtMedia for WordPress, BuddyPress and bbPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-88927 CVE record

CVSS 4.3 Medium

rtMedia for WordPress, BuddyPress and bbPress < 4.7.14 - Subscriber+ Arbitrary Album Media Injection via IDOR
- rtMedia for WordPress, BuddyPress and bbPress
- Broken access control
Not analysed yet 14 Oct 2026
CVE-2026-88912 CVE record

CVSS 4.2 Medium

rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOR
- rtMedia for WordPress, BuddyPress and bbPress
- Broken access control
Not analysed yet 13 Sept 2026
CVE-2023-5939 CVE record

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE
- rtMedia for WordPress, BuddyPress and bbPress
Not analysed yet 26 Dec 2023
CVE-2023-5931 CVE record

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE
- rtMedia for WordPress, BuddyPress and bbPress
Not analysed yet 26 Dec 2023