CVE-2026-59551

The vulnerability affects rtMedia for WordPress, BuddyPress, and bbPress versions up to 4.7.10, allowing an SQL injection that can be exploited by subscribers to execute arbitrary SQL commands. This could lead to unauthorized data access or manipulation, posing a significant risk to the integrity of the database. WordPress site administrators using these plugins should prioritize patching to mitigate potential exploitation.