rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.3%
exploitation probability
1.3%top 32% of all CVEs
observed exploitation
nono source reports it
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users.
Affected products
Unknown · rtMedia for WordPress, BuddyPress and bbPress