CVE-2023-5931 (published 2023-12-26T18:33:01.473Z)
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server
Affected products: Vendor: Unknown
Product: rtMedia for WordPress, BuddyPress and bbPress
Versions: 0