CVE-2023-5939

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users.

Affected

rtMedia for WordPress, BuddyPress and bbPress

CVSS v3.1 NVD

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

1.33% chance of exploitation in the next 30 days, 71st percentile

Published

2023-12-26

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/db5d41fc-bcd3-414f-aa99-54d5537007bc

References

• CVE Record
• NVD entry