{"cvss":9.3,"datePublished":"2026-10-26T00:00:00Z","dateUpdated":"2026-10-26T00:00:00Z","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Blind SQL Injection.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.11.","dueDate":"","id":"CVE-2026-66592","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"rtMedia for WordPress, BuddyPress and bbPress","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"  Improper Neutralization of Special Elements used in an SQL Command","vendor":"rtCamp Inc."}