CVE-2026-40773

Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 versions.

Score

CVSS 3.1 6.5 Medium

Status

Deferred - audit@patchstack.com

Published

2026-06-15

Last modified

2026-10-25

Weaknesses

CWE-862

Affected products

• Buddypress And Bbpress (Rtcamp Inc.)
• Rtmedia For Wordpress (Rtcamp Inc.)

References

• https://patchstack.com/database/wordpress/plugin/buddypress-media/vulnerability/wordpress-rtmedia-for-wordpress-buddypr…