bbPress

A vulnerability tracked as EUVD-2026-100859 has been disclosed in rtMedia, a media plugin for WordPress, BuddyPress and bbPress. Rated 4.3 out of 10 under CVSS v3.1, the flaw involves the plugin failing to verify that a user owns or may write to a given resource before version 4.7.14. Users are advised to update to the patched release.