Log in Start free

rtCamp

Products

ProductCVEsExploitedLatest
rtMedia for WordPress, BuddyPress and bbPress9–Oct 10, 2026
Transcoder2–Aug 27, 2025
GoDAM1–Dec 9, 2025
GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more1–Jul 23, 2026
Log in with Google1–Aug 13, 2026

Exploited and recent CVEs

  • CVE-2026-89301 High 7.5 rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' Parameter 0.4%
  • CVE-2026-16482 High 7.5 rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter 0.6%
  • CVE-2026-28185 Critical 9.8 WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability 0.3%
  • CVE-2026-59551 High 8.5 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability 0.4%
  • CVE-2026-59549 Critical 9.3 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability 0.4%
  • CVE-2026-14282 Critical 9.8 GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field 1.3%
  • CVE-2026-15287 Medium 6.5 rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection 0.4%
  • CVE-2026-25325 Medium 5.3 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2025-9218 Low 3.7 rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function 0.3%
  • CVE-2025-67584 Medium 5.3 WordPress GoDAM plugin <= 1.4.6 - Broken Access Control vulnerability 0.2%
  • CVE-2025-58209 Medium 6.5 WordPress Transcoder Plugin <= 1.4.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2023-41951 Medium 4.3 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability 0.6%
  • CVE-2024-3293 High 8.8 rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode 1.4%
  • CVE-2024-31305 Medium 4.3 WordPress Transcoder plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability 0.2%