CVE-2023-5931

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE

published December 26, 2023

CVSS
—
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00816 · 56.7th percentile
Published
2023-12-26T18:33Z
EPSS history
Timeline
  • 26 DEC 18:33Z
    rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE
    cvelistv5