Rtcamp Rtmedia vulnerabilities

2 vulnerabilities

Known vulnerabilities in Rtcamp Rtmedia, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2023-5939rtcamprtmedia+2
EPSS score
1.33%
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users.8.8CVE-2023-5931rtcamprtmedia+2
EPSS score
0.82%
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server