rtCamp Inc. CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL rtCamp Inc. CVE published 2026-10-10

CVE-2026-105892

CVE-2026-105892 is a Path Traversal vulnerability in rtMedia for WordPress, BuddyPress and bbPress. This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13. The vulnerability allows attackers to access sensitive files and directories, potentially leading to unauthorized data disclosure or system compromise. Defenders should assess exposure and prioritize patching to mitig [truncated]

MEDIUM rtCamp Inc. CVE published 2026-06-15

CVE-2026-40773

A Subscriber Broken Access Control vulnerability exists in rtMedia for WordPress, BuddyPress and bbPress versions up to 4.7.9. This issue allows a subscriber to access media that they should not have access to.