CVE-2026-66592

CriticalCVSS 9.3

Published: 20/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

Unauthenticated SQL Injection vulnerability in rtMedia for WordPress, BuddyPress and bbPress versions up to 4.7.11. An attacker can manipulate database queries.

Risk Assessment

Risk of unauthorized access to data, modification or deletion, and potential administrator account takeover.

Recommendation

Update the rtMedia plugin to the latest version that includes the security fix.

Original NVD description (English source)

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions.