8.8
CVSSv3

CVE-2023-5931

Published: 26/12/2023 Updated: 04/01/2024
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin prior to 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server

Vulnerable Product Search on Vulmon Subscribe to Product

rtcamp rtmedia