WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in rtMedia for WordPress, BuddyPress and bbPress

Add albums, photo, audio/video upload, privacy, sharing, front-end uploads & more. All this works on mobile/tablets devices.

15Reported vulnerabilities
9.8Highest CVSS score
4.7.12Latest version
7,000+Active installs

What to do now

Update rtMedia for WordPress, BuddyPress and bbPress to 4.7.12 or later. 15 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 18, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
WF-be97e1ca-6c9c-4641-ba7c-bbb14a58d99e Critical 9.8 — Before 4.2.1 4.2.1 December 21, 2016
WF-9ba74e58-0647-4283-9fa3-428976c54474 Critical 9.8 — Before 3.7.40 3.7.40 April 28, 2015
WF-1814ad55-0807-4def-b584-6dbbc5d6eb72 Critical 9.8 — 3.9.5 and earlier 3.10 November 24, 2014
CVE-2026-66592 Critical 9.3 0.3% 4.7.11 and earlier 4.7.12 August 20, 2026
CVE-2026-59549 Critical 9.3 0.2% 4.7.10 and earlier 4.7.11 July 27, 2026
CVE-2024-3293 High 8.8 1.4% 0 to 4.6.18 (inclusive)
0 to 4.6.18 (inclusive)		 4.6.19 April 23, 2024
CVE-2026-59551 High 8.5 0.3% 4.7.10 and earlier 4.7.11 July 27, 2026
CVE-2026-40773 Medium 6.5 0.3% 4.7.9 and earlier 4.7.10 June 15, 2026
CVE-2026-15287 Medium 6.5 0.4% 4.6.18 and earlier 4.6.19 April 29, 2024
WF-7b19b0b2-d6cb-4d92-9925-c77d517ddfb7 Medium 6.1 — Before 3.10.2 3.10.2 January 28, 2016
CVE-2026-25325 Medium 5.3 0.3% 0 to 4.7.8 (inclusive) 4.7.9 February 19, 2026
CVE-2023-41951 Medium 4.3 0.4% 4.6.14 and earlier 4.6.15 December 13, 2024
WF-5dfc145e-d2d4-4137-a5c6-dec2ebb41876 Medium 4.3 — Before 4.6.15 4.6.15 September 4, 2023
WF-be837a77-9b25-43af-aaba-94a8aa59e7e3 Medium 4.3 — Before 4.6.15 4.6.15 September 4, 2023
CVE-2025-9218 Low 3.7 0.3% 4.7.0 to 4.7.3 (inclusive) 4.7.4 December 13, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.