CVE-2023-5939: vulnerability in rtMedia for WordPress, BuddyPress and bbPress
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.3%
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users.
Affected products
Unknown · rtMedia for WordPress, BuddyPress and bbPressRelated CVEs — rtMedia for WordPress, BuddyPress and bbPress
In the same product, most dangerous first.
CVE-2023-5931—rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCEEPSS 0.8%CVE-2026-88927MEDIUMrtMedia for WordPress, BuddyPress and bbPress < 4.7.14 - Subscriber+ Arbitrary Album Media Injection via IDOREPSS 0.2%CVE-2026-88912MEDIUMrtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOREPSS 0.2%