CVE-2023-5939

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users.

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

1.33% chance of exploitation in the next 30 days, 69th percentile

Published

2023-12-26

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/db5d41fc-bcd3-414f-aa99-54d5537007bc

References

• CVE Record
• NVD entry

Related

• CVE-2023-5934
• CVE-2023-5940
• CVE-2023-5933
• CVE-2023-5942
• CVE-2023-5932
• CVE-2023-5943