CVE-2026-16482

{
  "etk_id": "ETK-2026-2674",
  "cve_id": "CVE-2026-16482",
  "display_id": "CVE-2026-16482",
  "ghsa_id": "GHSA-qjq8-433v-gm7m",
  "euvd_id": "EUVD-2026-76828",
  "status": "published",
  "anchor_state": "anchored",
  "title": "SQL injection in rtMedia for WordPress",
  "summary": "rtMedia for WordPress, BuddyPress and bbPress through version 4.7.11 is affected by an SQL injection issue. An unauthenticated remote attacker may be able to obtain database data when the site exposes a public page that uses an rtMedia shortcode.",
  "mitigation": "Disable rtMedia or remove public access to pages that render rtMedia shortcodes until a patched release is confirmed. No fixed version is recorded in the advisory data.",
  "vendor": "rtcamp",
  "product": "rtMedia for WordPress, BuddyPress and bbPress",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 4.7.11"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "rtMedia for WordPress, BuddyPress and bbPress",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.5,
  "cvss_src": "other",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 60.420331866666665,
  "t0_at": "2026-09-12T07:39:13.454000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-26T19:23:22.117051+00:00",
      "days": 44.48898915568287,
      "is_lower_bound": false,
      "measured_at": "2026-09-12T07:39:13.454000+00:00",
      "url": null
    },
    "kev": {
      "at": "2026-10-26T00:00:00+00:00",
      "days": 44,
      "is_lower_bound": false,
      "measured_at": "2026-09-12T07:39:13.454000+00:00",
      "precision": "day",
      "url": "https://vulncheck.com/cve/CVE-2026-16482"
    },
    "trigger_signal": {
      "at": "2026-10-26T00:00:00+00:00",
      "days": 43.68109428240741,
      "is_lower_bound": false,
      "measured_at": "2026-09-12T07:39:13.454000+00:00",
      "url": "https://vulncheck.com/cve/CVE-2026-16482"
    }
  }
}