← CVE Intelligence

CVE-2023-5931

rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE PUBLISHED

Description (CNA)

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server

Affected (CNA)

Vendor / productVersions
Unknown / rtMedia for WordPress, BuddyPress and bbPressaffected 0 before 4.6.16

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.