Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: rtCamp Component: Rtmedia Clear all filters
TI-2023-05471 CVE-2023-5939 · GHSA-v624-cfg3-pgh9

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE

Priority LOW 34

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01331 Published 2023-12-26 Fixed in 4.6.16
TI-2023-05463 CVE-2023-5931 · GHSA-4frw-j2v5-2xwf

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE

Priority MEDIUM 40

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00816 Published 2023-12-26 Fixed in 4.6.16 CWE-434