rtcamp

Security Risk Profile

/100

high

Security Risk Score

Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from December 26, 2023 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

7.7

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

63/100

high

🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

XSS

SQL Injection

Path Traversal

CSRF

Code Injection

Most Affected Products

1. Rtcamp rtMedia for WordPress, BuddyPress and bbPress3

2. Rtcamp Transcoder2

3. Rtcamp Rtmedia Wordpress2

4. Rtcamp rtMedia1

Recent Vulnerabilities

See more →

CVE-2026-124965

CVSS 6.5medium

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.16 - Cross Site Scripting (XSS) vulnerability

Nov 13, 2026🔧 No Patch

CVE-2026-105892

CVSS 9.8critical

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability

Oct 10, 2026🔧 No Patch

CVE-2026-66592

CVSS 9.3critical

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability

Aug 20, 2026🔧 No Patch

CVE-2025-58209

CVSS 6.5medium

WordPress Transcoder Plugin <= 1.4.0 - Cross Site Scripting (XSS) Vulnerability

Aug 27, 2025

CVE-2024-3293

CVSS 8.8EPSS 0%high

rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode

Apr 23, 2024🔧 No Patch

CVE-2024-31305

CVSS 4.3EPSS 0%medium

WordPress Transcoder plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability

Apr 12, 2024

CVE-2023-5939

CVSS 7.2EPSS 0%high

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE

Dec 26, 2023🔧 No Patch

CVE-2023-5931