Vulnerabilities in rtCamp

15 results
CVE-2024-3293HIGHrtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery ShortcodeEPSS 1.4%CVE-2026-14282CRITICALGoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload FieldEPSS 1.3%CVE-2023-41951MEDIUMWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2026-89301HIGHrtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' ParameterEPSS 0.4%CVE-2026-59549CRITICALWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-66592CRITICALWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-15287MEDIUMrtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL InjectionEPSS 0.4%CVE-2026-59551HIGHWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-16482HIGHrtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' ParameterEPSS 0.3%CVE-2026-25325MEDIUMWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-9218LOWrtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch FunctionEPSS 0.3%CVE-2026-28185CRITICALWordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerabilityEPSS 0.3%CVE-2025-67584MEDIUMWordPress GoDAM plugin <= 1.4.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-31305MEDIUMWordPress Transcoder plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-58209MEDIUMWordPress Transcoder Plugin <= 1.4.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%