WordPress security by component

rtMedia for WordPress, BuddyPress and bbPress

Plugin description

rtMedia for WordPress, BuddyPress and bbPress is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jul 10, 2026; the highest CVE/CNA score is 8.8.

Plugin slug: rtmedia-for-wordpress-buddypress-and-bbpress

Latest vulnerability

CVE-2026-15287: rtMedia for WordPress, BuddyPress and bbPress: SQL injection

rtMedia for WordPress, BuddyPress and bbPress is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 4.6.18.

PublishedJul 10, 2026

Known safe version> 4.6.18

		Safe version
Jul 10, 2026	CVE-2026-15287 rtMedia for WordPress, BuddyPress and bbPress: SQL injection rtMedia for WordPress, BuddyPress and bbPress is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 4.6.18.	> 4.6.18	CVE6.5 NVDPending
Apr 23, 2024	CVE-2024-3293 rtMedia for WordPress, BuddyPress and bbPress: SQL injection rtMedia for WordPress, BuddyPress and bbPress is affected by SQL injection. Exploitation requires at least contributor-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE8.8 NVDPending