Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-66592 EUVD-2026-63335GHSA-6g76-jfv7-jr9x

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability

Published Aug 20, 2026 · Updated Oct 26, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Blind SQL Injection.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.11.

Affected products

VendorProductAffectedFixed
rtCamp rtMedia for WordPress, BuddyPress and bbPress ≤ 4.7.11 —

References