High
CVE-2026-89301
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 20
Reset filters
Medium
CVE-2026-88912
rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2026-16482
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter
High
CVE-2026-66592
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection
High
CVE-2026-59549
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 - Unauthenticated SQL Injection
Medium
CVE-2026-59551
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-40773
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 - Missing Authorization
Medium
CVE-2026-25325
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.8 - Unauthenticated Information Exposure
Low
CVE-2025-9218
rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function
Medium
CVE-2026-15287
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-3293
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode
High
CVE-2023-5931
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.15 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2023-5939
rtMedia for WordPress, BuddyPress and bbPress WordPress <= 4.6.15 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-41951
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization via export_settings
Medium
be837a77-9b25-43af-aaba-94a8aa59e7e3
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization to Sensitive Information Exposure
Medium
5dfc145e-d2d4-4137-a5c6-dec2ebb41876
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization to Settings Update
Critical
be97e1ca-6c9c-4641-ba7c-bbb14a58d99e
rtMedia for WordPress, BuddyPress and bbPress <= 4.2 - Arbitary File Upload
Medium
7b19b0b2-d6cb-4d92-9925-c77d517ddfb7
rtMedia for WordPress, BuddyPress and bbPress <= 3.10.1 - Cross-Site Scripting
Critical
9ba74e58-0647-4283-9fa3-428976c54474
rtMedia for WordPress, BuddyPress and bbPress < 3.7.40 - SQL Injection
Critical
1814ad55-0807-4def-b584-6dbbc5d6eb72
rtMedia for WordPress, BuddyPress and bbPress <= 3.9.5 - Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.