Vulnerabilities / rtMedia for WordPress, BuddyPress and bbPress
rtMedia for WordPress, BuddyPress and bbPress vulnerabilities
Advisories WPSec published for rtMedia for WordPress, BuddyPress and bbPress. Other sources may list more. Its attack surface: rtMedia for WordPress, BuddyPress and bbPress on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-07 | WPSEC-2026-0532 | rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Authenticated (Subscriber+) Limited File Read and Deletion via 'files' Parameter | High 7.6 | 4.7.14 |
| 2026-10-07 | WPSEC-2026-0531 | rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Authenticated (Subscriber+) Missing Authorization to Media Attribute and Post Modification via Media Edit | Medium 6.5 | 4.7.14 |
License: CC BY 4.0