Veille CVE

Recherche « Unknown rtMedia for WordPress, BuddyPress and bbPress »

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown rtMedia for WordPress, BuddyPress and bbPress » ✕
  1. CVE-2026-88927 4.3 Moyenne

    Unknown rtMedia for WordPress, BuddyPress and bbPress

    The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.14 does not verify that a user owns or may write to the album an upload is assigned to, allowing users with a subscriber-level account or above to place media into another user's private album and have it attributed to that user.

  2. CVE-2026-88912 4.2 Moyenne

    Unknown rtMedia for WordPress, BuddyPress and bbPress

    The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.12 does not check ownership before changing the privacy level of an activity and its attached media, relying only on a nonce shared with every logged-in user, allowing users with a subscriber-level account or above to make another user's private activity public or hide it.