CVE-2023-5939: falha em rtMedia for WordPress, BuddyPress and bbPress
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.3%
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users.
Produtos afetados
Unknown · rtMedia for WordPress, BuddyPress and bbPressCVEs relacionadas — rtMedia for WordPress, BuddyPress and bbPress
No mesmo produto, das mais perigosas para as menos.
CVE-2023-5931—rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCEEPSS 0.8%CVE-2026-88927MEDIUMrtMedia for WordPress, BuddyPress and bbPress < 4.7.14 - Subscriber+ Arbitrary Album Media Injection via IDOREPSS 0.2%CVE-2026-88912MEDIUMrtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOREPSS 0.2%