همهٔ محصولات
buddypress-media
WordPress · افزونه22 گزارش| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|
| rtMedia for WordPress, BuddyPress and bbPress < 4.7.14 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-88927 |
buddypress-media |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Unauthenticated Arbitrary File DeletionCVE-2026-105892 |
buddypress-media |
WordPress |
بحرانی
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' ParameterCVE-2026-89301 |
buddypress-media |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' ParameterCVE-2026-16482 |
buddypress-media |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-88912 |
buddypress-media |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL InjectionCVE-2026-66592 |
buddypress-media |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 - Unauthenticated SQL InjectionCVE-2026-59549 |
buddypress-media |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 - Authenticated (Subscriber+) SQL InjectionCVE-2026-59551 |
buddypress-media |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL InjectionCVE-2026-15287 |
buddypress-media |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.7.8 - Unauthenticated Information ExposureCVE-2026-25325 |
buddypress-media |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 - Missing AuthorizationCVE-2026-40773 |
buddypress-media |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch FunctionCVE-2025-9218 |
buddypress-media |
WordPress |
کم
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 3.9.5 - Local File Inclusion |
buddypress-media |
WordPress |
بحرانی
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery ShortcodeCVE-2024-3293 |
buddypress-media |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.6.15 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2023-5931 |
buddypress-media |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress WordPress <= 4.6.15 - Authenticated (Admin+) Arbitrary File UploadCVE-2023-5939 |
buddypress-media |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.2 - Arbitary File Upload |
buddypress-media |
WordPress |
بحرانی
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization to Sensitive Information Exposure |
buddypress-media |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress < 3.7.40 - SQL Injection |
buddypress-media |
WordPress |
بحرانی
|
اصلاح گزارش شده |
|
| rtMedia for WordPress, BuddyPress and bbPress <= 3.10.1 - Cross-Site Scripting |
buddypress-media |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
