Access violation vulnerability in RTMKit 1.6.7

The RTMKit plugin used in WordPress is not secure and can be exploited in versions 1.6.7 and below. This is because there is no proper checking on a key controlled by the user. As a result, attackers with Contributor-level access or higher can carry out unauthorized actions.

Detected in:

RTMKit fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.