CVE-2023-5931
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
26 Dec 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server
Affected products
Unknown · rtMedia for WordPress, BuddyPress and bbPressWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →