buddypress-media vulnerabilities

CVEs whose affected-version data names the buddypress-media package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2026-105892Critical· 9.8

2w ago

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, Bu…

▾ MidnightrtCamp Inc. · buddypress-mediaEPSS 0.42%via NVD

CVE-2026-66592Critical· 9.3

2mo ago

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Blind SQL Injection.This issue affects rtMedia for Wo…

▾ MidnightrtCamp Inc. · buddypress-mediaEPSS 0.40%via CVEORG