WordPress Plugin Vulnerabilities

trMedia for WordPress <= 3.10.1 - XSS

Description

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
buddypress-media
Fixed in 3.10.2

References

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
bfaeabe4-053e-4fe4-a7f3-25fd7a22a985

Timeline

Publicly Published
2016-01-28 (about 10 years ago)
Added
2019-08-07 (about 6 years ago)
Last Updated
2019-11-27 (about 6 years ago)

Other

Published
Title
Published
2017-07-24
Title
Simple Custom CSS and JS <= 3.3 - Authenticated Cross-Site Scripting (XSS)
Published
2025-06-25
Title
Image Editor by Pixo < 2.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via download Parameter
Published
2024-11-08
Title
EventPress <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-03-24
Title
Message ticker <= 9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2025-01-24
Title
Bilingual Linker < 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting