Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-124965 EUVD-2026-125427GHSA-v85q-fv6p-6x52

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.16 - Cross Site Scripting (XSS) vulnerability

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Stored XSS.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.16.

Affected products

VendorProductAffectedFixed
rtCamp rtMedia for WordPress, BuddyPress and bbPress ≤ 4.7.16 —

References