Now officially on WordPress.org

CVE Database / CVE-2026-40773

CVE · Medium

CVE-2026-40773 — rtMedia for WordPress, BuddyPress and bbPress [buddypress-media] < 4.7.10

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-40773 rtMedia for WordPress, BuddyPress and bbPress [buddypress-media] < 4.7.10 Missing Authorization Medium 6.5 < 4.7.10 4.7.10 2026-04-21 —

CVE-2026-40773

Authenticated users with subscriber privileges or higher can exploit a security flaw in the rtMedia plugin, allowing them to bypass intended access controls on certain functions up through version 4.7.9. This vulnerability enables such users to execute actions they shouldn't be able to perform. The issue is present in versions of the plugin that include 4.7.9.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings