Skip to content
Threat Feed
Subscribe

Product

RtMedia for WordPress, BuddyPress and BbPress (<= 4.7.13)

1 brief RSS
high advisory

Unauthenticated Arbitrary File Deletion in rtMedia Plugin for WordPress

The rtMedia for WordPress plugin contains a vulnerability in the 'process' function allowing unauthenticated attackers to delete arbitrary files on the server by leveraging exposed nonces.

rtMedia for WordPress, BuddyPress and bbPress wordpress vulnerability web-application file-deletion
1t 1c