PT-2024-13018 · WordPress · Rtmedia

Thiennv · Published 2024-12-13 · Updated 2024-12-17 · CVE-2023-41951

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions rtMedia for WordPress, BuddyPress and bbPress versions through 4.6.14

Description The issue affects the access control security levels in rtMedia for WordPress, BuddyPress, and bbPress, allowing exploitation due to incorrectly configured security levels. This involves broken access control, which is a high-severity vulnerability. Remediation is crucial to protect WordPress sites.

Recommendations For versions through 4.6.14, update to the latest version to protect your WordPress site and ensure security. As a temporary workaround, consider restricting access to vulnerable components until a patch is available. Ensure you patch your systems to prevent exploitation of the broken access control vulnerability.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2023-41951

Affected Products

Rtmedia

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-41951 · Security Note
• https://twitter.com/transilienceai/status/1868887522027114677 · Twitter Post
• https://twitter.com/transilienceai/status/1868887503253459418 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/buddypress-media/vulnerability/wordpress-rtmedia-for-wordpress-buddypress-and-bbpress-plugin-4-6-14-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/transilienceai/status/1868887513269481726 · Twitter Post
• https://twitter.com/CVEnew/status/1867908514569400689 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/buddypress-media/vulnerability/wordpress-rtmedia-for-wordpress-buddypress-and-bbpress-plugin-4-6-14-broken-access-control-vulnerability?_s_id=cve · Note