Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in rtMedia for WordPress, BuddyPress and bbPress 4.2.1

  • Severity: critical
  • Status: Fixed
  • Publication: December 21, 2016

The rtMedia plugin for WordPress, BuddyPress and bbPress is vulnerable to unauthorized access to files in versions up to and including 4.2. This is caused by the ‘rtUploadAttachment.php’ file not properly preventing direct access to the file. This flaw allows unauthenticated attackers to access the file directly, which triggers execution and allows them to upload files without permission.

Detected in:

rtMedia for WordPress, BuddyPress and bbPress fixed vulnerable versions: >= * < 4.2.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.