Plugin icon

rtMedia for WordPress, BuddyPress and bbPress

buddypress-media

Vulnerabilities:

15

Last Updated:

July 21, 2026

Active Installs:

7000

Published
Title
Fixed in
CVSS
Published
2026-07-23
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.7.11 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 4.7.11
CVSS
6.5 (medium)
Published
2026-07-23
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.7.11 - Unauthenticated SQL Injection
Fixed in
Fixed in 4.7.11
CVSS
7.5 (high)
Published
2026-04-21
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.7.10 - Missing Authorization
Fixed in
Fixed in 4.7.10
CVSS
4.3 (medium)
Published
2026-02-01
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.7.9 - Unauthenticated Information Exposure
Fixed in
Fixed in 4.7.9
CVSS
5.3 (medium)
Published
2025-12-12
Title
rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function
Fixed in
Fixed in 4.7.4
CVSS
3.7 (low)
Published
2024-04-29
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.19 - Subscriber+ SQL Injection
Fixed in
Fixed in 4.6.19
CVSS
7.7 (high)
Published
2024-04-22
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.19 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode
Fixed in
Fixed in 4.6.19
CVSS
8.8 (high)
Published
2023-11-29
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE
Fixed in
Fixed in 4.6.16
CVSS
9.9 (critical)
Published
2023-11-29
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE
Fixed in
Fixed in 4.6.16
CVSS
6.6 (medium)
Published
2023-09-06
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.15 - Missing Authorization via export_settings
Fixed in
Fixed in 4.6.15
CVSS
4.3 (medium)
Published
2023-09-04
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.15 - Missing Authorization to Settings Update
Fixed in
Fixed in 4.6.15
CVSS
4.3 (medium)
Published
2023-09-04
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.15 - Missing Authorization to Sensitive Information Exposure
Fixed in
Fixed in 4.6.15
CVSS
4.3 (medium)
Published
2016-12-21
Title
trMedia for WordPress <= 4.2 - Unspecified Issues
Fixed in
Fixed in 4.2.1
CVSS
n/a
Published
2016-01-28
Title
trMedia for WordPress <= 3.10.1 - XSS
Fixed in
Fixed in 3.10.2
CVSS
n/a
Published
2015-04-28
Title
rtMedia for WordPress, BuddyPress & bbPress 3.7.39 - SQL Injection
Fixed in
Fixed in 3.7.40
CVSS
n/a