Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2025-12-15
CVE-2025-9218 - Buddypress And Bbpress Plugin
The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to to Information Disclosure due to missing authorization in the handle_rest_pre_dispatch() function when the Godam plugin is active, in versions 4.7.0 to 4.7.3. This makes it possible for unauthenticated attackers to retrieve media items associated with draft or private posts.
PLUGIN
Buddypress And Bbpress
CVE-2025-9218
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2024-3293 - Buddypress And Bbpress Plugin
The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to blind SQL Injection via the rtmedia_gallery shortcode in all versions up to, and including, 4.6.18 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
PLUGIN
Buddypress And Bbpress
CVE-2024-3293
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2023-5931 - Buddypress And Bbpress Plugin
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server
PLUGIN
Buddypress And Bbpress
CVE-2023-5931
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2023-5939 - Buddypress And Bbpress Plugin
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users.
PLUGIN
Buddypress And Bbpress
CVE-2023-5939
Risk Score