rtCamp vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20253
3. 20268

Newest CVEs

• CVE-2026-89301

  rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' Parameter

  rtcamp · rtMedia for WordPress, BuddyPress and bbPress

  High7.5
• CVE-2026-16482

  rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter

  rtcamp · rtMedia for WordPress, BuddyPress and bbPress

  High7.5
• CVE-2026-28185

  WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability

  rtCamp · Log in with Google

  Critical9.8
• CVE-2026-59551

  WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability

  rtCamp · rtMedia for WordPress, BuddyPress and bbPress

  High8.5
• CVE-2026-59549

  WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability

  rtCamp · rtMedia for WordPress, BuddyPress and bbPress

  Critical9.3
• CVE-2026-14282

  GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field

  rtcamp · GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more

  Critical9.8
• CVE-2026-15287

  rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection

  rtcamp · rtMedia for WordPress, BuddyPress and bbPress

  Medium6.5
• CVE-2026-25325

  WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability

  rtCamp · rtMedia for WordPress, BuddyPress and bbPress

  Medium5.3
• CVE-2025-9218

  rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function

  rtcamp · rtMedia for WordPress, BuddyPress and bbPress

  Low3.7
• CVE-2025-67584

  WordPress GoDAM plugin <= 1.4.6 - Broken Access Control vulnerability

  rtCamp · GoDAM

  Medium5.3