← Back

Rtmedia

rtmedia

Vendor: Rtcamp • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-5939
1Rtcamp
1Rtmedia
Jun 17, 2026
Dec 26, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users.
CVE-2023-5931
1Rtcamp
1Rtmedia
Jun 17, 2026
Dec 26, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary fil...Show more
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the serverShow less