WordPress Vulnerability Scanner WPSec
Vulnerabilities / rtMedia for WordPress, BuddyPress and bbPress

rtMedia for WordPress, BuddyPress and bbPress vulnerabilities

Advisories WPSec published for rtMedia for WordPress, BuddyPress and bbPress. Other sources may list more. Its attack surface: rtMedia for WordPress, BuddyPress and bbPress on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-14 WPSEC-2026-0926 rtMedia for WordPress, BuddyPress and bbPress <= 4.7.14 - Unauthenticated Insecure Direct Object Reference to Activity Overwrite via 'activity_id' Parameter Medium 5.3 4.7.15
2026-10-14 WPSEC-2026-0925 rtMedia for WordPress, BuddyPress and bbPress <= 4.7.14 - Unauthenticated Insecure Direct Object Reference via 'rtMedia_attached_files' Parameter Medium 5.3 4.7.15
2026-10-07 WPSEC-2026-0532 rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Authenticated (Subscriber+) Limited File Read and Deletion via 'files' Parameter High 7.6 4.7.14
2026-10-07 WPSEC-2026-0531 rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Authenticated (Subscriber+) Missing Authorization to Media Attribute and Post Modification via Media Edit Medium 6.5 4.7.14

License: CC BY 4.0