{"id":"CVE-2026-105892","published":"2026-10-10T19:16:56.990","lastModified":"2026-10-13T13:28:15.717","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/buddypress-media/vulnerability/wordpress-rtmedia-for-wordpress-buddypress-and-bbpress-plugin-4-7-13-arbitrary-file-deletion-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows attackers to perform path traversal attacks on rtMedia for WordPress, BuddyPress and bbPress installations, potentially enabling them to read arbitrary files from the server's filesystem. The flaw occurs due to improper limitation of pathname to a restricted directory, making it possible for attackers to access sensitive data beyond the intended media directories.","exploitability":"Exploitation is relatively straightforward with no special preconditions required, as attackers can simply craft malicious requests to traverse directories and access files through the vulnerable plugin's endpoints.","blast_radius":"The impact could be significant across many WordPress installations using rtMedia, potentially exposing sensitive configuration files, database credentials, and user data if attackers successfully exploit this vulnerability.","remediation":"Upgrade to rtMedia version 4.7.14 or later to remediate this path traversal vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["path-traversal","wordpress","file-access"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:46:01.938Z"}}