Read the docs

rtCamp

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

rtCamp records in CISA KEV

No rtCamp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rtmedia 2 records MEDIUM

Records

2 records in Rtmedia · all components

TI-2023-05463 CVE-2023-5931 · GHSA-4frw-j2v5-2xwf

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE

Priority MEDIUM 40

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00816 Published 2023-12-26 Fixed in 4.6.16 CWE-434
TI-2023-05471 CVE-2023-5939 · GHSA-v624-cfg3-pgh9

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE

Priority LOW 34

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01331 Published 2023-12-26 Fixed in 4.6.16
Open these records in search →