Plugin icon

rtMedia for WordPress, BuddyPress and bbPress

buddypress-media

Vulnerabilities:

11

Last Updated:

January 30, 2026

Active Installs:

9000

Published
Title
Fixed in
CVSS
Published
2025-12-12
Title
rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function
Fixed in
Fixed in 4.7.4
CVSS
3.7 (low)
Published
2024-04-29
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.19 - Subscriber+ SQL Injection
Fixed in
Fixed in 4.6.19
CVSS
7.7 (high)
Published
2024-04-22
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.19 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode
Fixed in
Fixed in 4.6.19
CVSS
8.8 (high)
Published
2023-11-29
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE
Fixed in
Fixed in 4.6.16
CVSS
6.6 (medium)
Published
2023-11-29
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE
Fixed in
Fixed in 4.6.16
CVSS
9.9 (critical)
Published
2023-09-06
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.15 - Missing Authorization via export_settings
Fixed in
Fixed in 4.6.15
CVSS
4.3 (medium)
Published
2023-09-04
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.15 - Missing Authorization to Settings Update
Fixed in
Fixed in 4.6.15
CVSS
4.3 (medium)
Published
2023-09-04
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.15 - Missing Authorization to Sensitive Information Exposure
Fixed in
Fixed in 4.6.15
CVSS
4.3 (medium)
Published
2016-12-21
Title
trMedia for WordPress <= 4.2 - Unspecified Issues
Fixed in
Fixed in 4.2.1
CVSS
n/a
Published
2016-01-28
Title
trMedia for WordPress <= 3.10.1 - XSS
Fixed in
Fixed in 3.10.2
CVSS
n/a
Published
2015-04-28
Title
rtMedia for WordPress, BuddyPress & bbPress 3.7.39 - SQL Injection
Fixed in
Fixed in 3.7.40
CVSS
n/a