CPE
The rtMedia for WordPress plugin is vulnerable to unauthenticated time-based blind SQL injection via the compare parameter, allowing sensitive database information extraction.