rtMedia for WordPress, BuddyPress and bbPress vulnerabilities
We track 1 vulnerability in rtMedia for WordPress, BuddyPress and bbPress products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 26, 2023.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest rtMedia for WordPress, BuddyPress and bbPress vulnerabilities
- 8.8 High severity
rtMedia for WordPress, BuddyPress and bbPress: Unrestricted Upload of File with Dangerous Type
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server