Skip to content
OpenAdvisories

Vendor

rtcamp

17 known vulnerabilities.

rtcamp at a glance

Last 12 months
13
Critical · all time
5
Exploited · all time
0
Public exploit · all time
2
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 2 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 1 vulnerability Jun July 2026: 4 vulnerabilities, 2 critical August 2026: 2 vulnerabilities, 2 critical September 2026: 1 vulnerability Sep October 2026: 2 vulnerabilities, 1 critical November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202621
Sep 202610
Aug 202622
Jul 202642
Jun 202610
May 202600
Apr 202600
Mar 202600
Feb 202610
Jan 202600
Dec 202520
Nov 202500
Oct 202500
Sep 202500
Aug 202510
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202410

Products

rtMedia for WordPress, BuddyPress and bbPress 12 Transcoder 2 Log in with Google 1 GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more 1 GoDAM 1
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Critical 9.8
    CVE-2026-105892

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, BuddyPress and bbPress: …

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • High 7.5
    CVE-2026-89301

    rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' Parameter

    The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the process function in all versions up to, and including, 4.7.13 This makes it possible for unauthentica…

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • High 7.5
    CVE-2026-16482

    rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter

    The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'compare' parameter in all versions up to, and including, 4.7.11 due to insufficient escaping on the user supplied parameter and lac…

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Critical 9.3
    CVE-2026-66592

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Blind SQL Injection.This issue affects rtMedia for WordPress, BuddyPress an…

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Critical 9.8
    CVE-2026-28185

    WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability

    Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions.

    rtcamp Log in with Google
  • High 8.5
    CVE-2026-59551

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability

    Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Critical 9.3
    CVE-2026-59549

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability

    Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Critical 9.8
    CVE-2026-14282 Public exploit

    GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field

    The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is due to insufficient file type validatio…

    rtcamp GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more Web / CMS
  • Medium 6.5
    CVE-2026-15287

    rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection

    The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based SQL Injection via the order_by parameter in all versions up to, and including, 4.6.18 due to insufficient escaping on the user supplied parameter and lack of su…

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Medium 6.5
    CVE-2026-40773

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.9 - Broken Access Control vulnerability

    Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 versions.

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Medium 5.3
    CVE-2026-25325

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Retrieve Embedded Sensitive Data.This issue affects rtMedia for WordPress, BuddyPress and …

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Low 3.7
    CVE-2025-9218

    rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function

    The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to to Information Disclosure due to missing authorization in the handle_rest_pre_dispatch() function when the Godam plugin is active, in versions 4.7.0 to 4.7.3. This makes i…

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Medium 5.3
    CVE-2025-67584

    WordPress GoDAM plugin <= 1.4.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in rtCamp GoDAM godam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoDAM: from n/a through <= 1.4.6.

    rtcamp GoDAM
  • Medium 6.5
    CVE-2025-58209

    WordPress Transcoder Plugin <= 1.4.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtCamp Transcoder transcoder allows Stored XSS.This issue affects Transcoder: from n/a through <= 1.4.0.

    rtcamp Transcoder
  • Medium 4.3
    CVE-2023-41951

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability

    Missing Authorization vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.6.14.

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • High 8.8
    CVE-2024-3293 Public exploit

    rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode

    The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to blind SQL Injection via the rtmedia_gallery shortcode in all versions up to, and including, 4.6.18 due to insufficient escaping on the user supplied parameter and lack of …

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Medium 4.3
    CVE-2024-31305

    WordPress Transcoder plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in rtCamp Transcoder.This issue affects Transcoder: from n/a through 1.3.5.

    rtcamp Transcoder