Vendor
high
advisory
Unauthenticated Arbitrary File Deletion in rtMedia Plugin for WordPress
1 TTP 1 CVEThe rtMedia for WordPress plugin contains a vulnerability in the 'process' function allowing unauthenticated attackers to delete arbitrary files on the server by leveraging exposed nonces.
rtMedia for WordPress, BuddyPress and bbPress
wordpress
vulnerability
web-application
file-deletion
1t
1c
high
advisory
CVE-2026-16482: Blind SQL Injection in rtMedia Plugin
1 rule 1 TTP 1 CVEThe rtMedia for WordPress plugin is vulnerable to unauthenticated time-based blind SQL injection via the compare parameter, allowing sensitive database information extraction.
rtMedia for WordPress, BuddyPress and bbPress
1r
1t
1c