Skip to content
OpenAdvisories

Vendor

rtcamp

17 known vulnerabilities.

Products

rtMedia for WordPress, BuddyPress and bbPress 12 Transcoder 2 Log in with Google 1 GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more 1 GoDAM 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-15287

    rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection

    The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based SQL Injection via the order_by parameter in all versions up to, and including, 4.6.18 due to insufficient escaping on the user supplied parameter and lack of su…

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Medium 6.5
    CVE-2026-40773

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.9 - Broken Access Control vulnerability

    Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 versions.

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Medium 5.3
    CVE-2026-25325

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Retrieve Embedded Sensitive Data.This issue affects rtMedia for WordPress, BuddyPress and …

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Medium 5.3
    CVE-2025-67584

    WordPress GoDAM plugin <= 1.4.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in rtCamp GoDAM godam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoDAM: from n/a through <= 1.4.6.

    rtcamp GoDAM
  • Medium 6.5
    CVE-2025-58209

    WordPress Transcoder Plugin <= 1.4.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtCamp Transcoder transcoder allows Stored XSS.This issue affects Transcoder: from n/a through <= 1.4.0.

    rtcamp Transcoder
  • Medium 4.3
    CVE-2023-41951

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability

    Missing Authorization vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.6.14.

    rtcamp rtMedia for WordPress, BuddyPress and bbPress Web / CMS
  • Medium 4.3
    CVE-2024-31305

    WordPress Transcoder plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in rtCamp Transcoder.This issue affects Transcoder: from n/a through 1.3.5.

    rtcamp Transcoder