CVE-2025-9218

Name of the Vulnerable Software and Affected Versions rtMedia for WordPress, BuddyPress and bbPress versions 4.7.0 through 4.7.3

Description The rtMedia plugin for WordPress, BuddyPress, and bbPress has an information disclosure issue. Missing authorization within the handle rest pre dispatch() function, specifically when the Godam plugin is active, allows unauthenticated attackers to access media items linked to draft or private posts.

Recommendations Update to version 4.7.4 or later.