CVE-2023-41951: falha de média gravidade em rtCamp rtMedia for WordPress, BuddyPress and…
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability
Publicada em · Atualizada em
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.6%
probabilidade de exploração
0.6%top 55% das CVEs
exploração observada
nãonenhuma fonte reporta
Missing Authorization vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.6.14.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
rtCamp · rtMedia for WordPress, BuddyPress and bbPressCVEs relacionadas — rtCamp rtMedia for WordPress, BuddyPress and…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-66592CRITICALWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-59549CRITICALWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-59551HIGHWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-25325MEDIUMWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerabilityEPSS 0.3%