Description
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rtCamp | rtMedia for WordPress, BuddyPress and bbPress | ≤ 4.7.10 | — |
Critical · 9.3
CVE-2026-59549
EUVD-2026-49218GHSA-9j27-8337-7f5m
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability
Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Patchstack