RtMedia for WordPress, BuddyPress and BbPress (<= 4.7.11)

The rtMedia for WordPress plugin is vulnerable to unauthenticated time-based blind SQL injection via the compare parameter, allowing sensitive database information extraction.