CVE-2025-9218

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to to Information Disclosure due to missing authorization in the handle_rest_pre_dispatch() function when the Godam plugin is active, in versions 4.7.0 to 4.7.3. This makes it possible for unauthenticated attackers to retrieve media items associated with draft or private posts.

CVSS v3 3.7 LOW

3.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://plugins.trac.wordpress.org/changeset/3386907/buddypress-media/tags/4.7.4/app/main/controllers/api/RTMediaJsonApi.php
https://wordpress.org/plugins/buddypress-media/#developers
https://www.wordfence.com/threat-intel/vulnerabilities/id/68533b4c-1bdf-4104-a263-757b018af129?source=cve

Configurations

No configuration.

History

07 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) El plugin rtMedia para WordPress, BuddyPress y bbPress para WordPress es vulnerable a revelación de información debido a falta de autorización en la función handle_rest_pre_dispatch() cuando el plugin Godam está activo, en las versiones 4.7.0 a 4.7.3. Esto hace posible que atacantes no autenticados recuperen elementos multimedia asociados con publicaciones borrador o privadas.

Information

Published : 2025-12-13 16:16

Updated : 2026-10-07 19:10

NVD link : CVE-2025-9218

Mitre link : CVE-2025-9218

CVE.ORG link : CVE-2025-9218

JSON object : View

Products Affected

No product.

CWE

CWE-862

Missing Authorization

{"id": "CVE-2025-9218", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-9218", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-15T15:43:29.547791Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@wordfence.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.2}]}, "affected": [{"source": "security@wordfence.com", "affectedData": [{"vendor": "rtcamp", "product": "rtMedia for WordPress, BuddyPress and bbPress", "versions": [{"status": "affected", "version": "4.7.0", "versionType": "semver", "lessThanOrEqual": "4.7.3"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-13T16:16:57.000", "references": [{"url": "https://plugins.trac.wordpress.org/changeset/3386907/buddypress-media/tags/4.7.4/app/main/controllers/api/RTMediaJsonApi.php", "source": "security@wordfence.com"}, {"url": "https://wordpress.org/plugins/buddypress-media/#developers", "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/68533b4c-1bdf-4104-a263-757b018af129?source=cve", "source": "security@wordfence.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@wordfence.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to to Information Disclosure due to missing authorization in the handle_rest_pre_dispatch() function when the Godam plugin is active, in versions 4.7.0 to 4.7.3. This makes it possible for unauthenticated attackers to retrieve media items associated with draft or private posts."}, {"lang": "es", "value": "El plugin rtMedia para WordPress, BuddyPress y bbPress para WordPress es vulnerable a revelaci\u00f3n de informaci\u00f3n debido a falta de autorizaci\u00f3n en la funci\u00f3n handle_rest_pre_dispatch() cuando el plugin Godam est\u00e1 activo, en las versiones 4.7.0 a 4.7.3. Esto hace posible que atacantes no autenticados recuperen elementos multimedia asociados con publicaciones borrador o privadas."}], "lastModified": "2026-10-07T19:10:00.160", "sourceIdentifier": "security@wordfence.com"}