MY SERVER HACKED
CRITICAL 9.8 CVE-2026-105892 Published 10 Oct 2026

rtMedia WordPress Plugin Path Traversal Vulnerability

Worried this affects your website?

Get Emergency Help help@myserverhacked.com

rtMedia for WordPress, BuddyPress and bbPress (buddypress-media) contains a Path Traversal vulnerability.

The plugin improperly limits paths to restricted directories, allowing path traversal attacks.

Affected versions:

  • rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13

Reference: CVE-2026-105892 on NVD

← Back to Security News