Skip to content
PluginCanary

rtMedia for WordPress, BuddyPress and bbPress

by rtCamp · 7,000+ active installs · Checked 3 Nov 2026
Healthy6 Warnings

Healthy: vulnerability published 14 Oct 2026, fixed in 4.7.14.

81/ 100 Canary Score
Sub-scores for rtMedia for WordPress, BuddyPress and bbPress
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 14 Oct 2026, fixed in 4.7.14. Update to version 4.7.14 or later.14 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 4.7.14. Update to version 4.7.14 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 4.7.14. Update to version 4.7.14 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Sep 2026, fixed in 4.7.12. Update to version 4.7.12 or later.13 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 11 Sep 2026, fixed in 4.7.12. Update to version 4.7.12 or later.11 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 19 Aug 2026, fixed in 4.7.12. Update to version 4.7.12 or later.19 Aug 2026Evidence
  • InfoSEC-311 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
rtcamp6 Aug 2012 to 28 Oct 2026, 351 commits
thrijith24 Jan 2019 to 17 Feb 2020, 12 commits
dharmin167 Aug 2019 to 30 Apr 2020, 6 commits
vaishu.agola278 Jan 2021 to 8 Jan 2021, 50 commits
pooja121028 Apr 2022 to 20 Jul 2022, 4 commits
pavanpatil114 Nov 2022 to 24 Jul 2024, 3 commits

6 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
7 days ago
Releases, 24 months
19
Tested up to
7.0 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for rtMedia for WordPress, BuddyPress and bbPress
Q1 20242
Q2 20241
Q3 20242
Q4 20240
Q1 20251
Q2 20253
Q3 20252
Q4 20254
Q1 20262
Q2 20261
Q3 20263
Q4 20263

Last release 28 Oct 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
14 Oct 2026rtMedia for WordPress, BuddyPress and bbPress < 4.7.14 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3< 4.7.144.7.140
9 Oct 2026rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' Parameter7.5<= 4.7.134.7.140
8 Oct 2026rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Unauthenticated Arbitrary File Deletion9.1<= 4.7.134.7.140
13 Sep 2026rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3< 4.7.124.7.120
11 Sep 2026rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter7.5<= 4.7.114.7.120
19 Aug 2026rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection7.5<= 4.7.114.7.120
23 Jul 2026rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 - Unauthenticated SQL Injection7.5<= 4.7.104.7.110
23 Jul 2026rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 - Authenticated (Subscriber+) SQL Injection6.5<= 4.7.104.7.110
21 Apr 2026rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 - Missing Authorization4.3<= 4.7.94.7.100
1 Feb 2026rtMedia for WordPress, BuddyPress and bbPress <= 4.7.8 - Unauthenticated Information Exposure5.3<= 4.7.84.7.90
12 Dec 2025rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function3.74.7.0 to 4.7.34.7.40
29 Apr 2024rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection6.5<= 4.6.184.6.190
22 Apr 2024rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode8.8<= 4.6.184.6.190
29 Nov 2023rtMedia for WordPress, BuddyPress and bbPress <= 4.6.15 - Authenticated (Subscriber+) Arbitrary File Upload8.8<= 4.6.154.6.160
29 Nov 2023rtMedia for WordPress, BuddyPress and bbPress WordPress <= 4.6.15 - Authenticated (Admin+) Arbitrary File Upload7.2<= 4.6.154.6.160
6 Sep 2023rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization via export_settings4.3<= 4.6.144.6.150
4 Sep 2023rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization to Sensitive Information Exposure4.3< 4.6.154.6.150
4 Sep 2023rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization to Settings Update4.3< 4.6.154.6.150
21 Dec 2016rtMedia for WordPress, BuddyPress and bbPress <= 4.2 - Arbitary File Upload9.8< 4.2.14.2.10
28 Jan 2016rtMedia for WordPress, BuddyPress and bbPress <= 3.10.1 - Cross-Site Scripting6.1< 3.10.23.10.20
28 Apr 2015rtMedia for WordPress, BuddyPress and bbPress < 3.7.40 - SQL Injection9.8< 3.7.403.7.400
24 Nov 2014rtMedia for WordPress, BuddyPress and bbPress <= 3.9.5 - Local File Inclusion9.8<= 3.9.53.10394

Source: Wordfence Intelligence.

Reputation

Lifetime rating 3.7 from 152 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star91
4 star8
3 star4
2 star7
1 star42

Momentum

7,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for rtMedia for WordPress, BuddyPress and bbPress
4 May 2026391
11 May 2026500
18 May 2026792
25 May 2026461
1 Jun 2026416
8 Jun 2026374
15 Jun 2026348
22 Jun 2026305
29 Jun 2026341
6 Jul 2026351
13 Jul 2026394
20 Jul 20263,260
27 Jul 20261,033
3 Aug 2026893
10 Aug 2026458
17 Aug 20263,689
24 Aug 20263,055
31 Aug 2026890
7 Sep 2026733
14 Sep 2026898
21 Sep 2026674
28 Sep 2026551
5 Oct 20263,820
12 Oct 20263,146
19 Oct 20261,075
26 Oct 20263,533
2 Nov 2026196

Weekly downloads over the last 4 weeks are 65% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Private groupsScore 91 · 1,000+BuddyDriveScore 91 · 1,000+forumAttachments for bbPressScore 90 · 6,000+bbPress Notify (No-Spam)Score 90 · 2,000+WP DiscourseScore 90 · 1,000+

Facts

Version4.7.16
AuthorrtCamp
Added6 Aug 2012
Last updated28 Oct 2026
Active installs7,000+
Requires WordPress4.9.6
Tested up to7.0.8
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagsalbum, audio, media, buddypress, multimedia

Other plugins by this author: Nginx Helper, Log in with Google, Blogger To WordPress, WP Menu Custom Fields, Transcoder, rtCarousel - Flexible Carousel & Slider Block for Images, Videos, Testimonials & More, GoDAM - Video Hosting for LMS & Online Courses, Embed Google Drive, Trust.txt Manager, Search with Google, rtSocial, Publishio - Build Pages & Posts with ChatGPT and Claude using MCP

Questions

Is rtMedia for WordPress, BuddyPress and bbPress still maintained?

rtMedia for WordPress, BuddyPress and bbPress was last updated on 28 Oct 2026. Its Canary status is Healthy.

Is rtMedia for WordPress, BuddyPress and bbPress safe?

rtMedia for WordPress, BuddyPress and bbPress has no open unpatched vulnerabilities on record. 11 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns rtMedia for WordPress, BuddyPress and bbPress?

The wordpress.org author is rtCamp. Recent committers: rtcamp, pavanpatil1, pooja1210, vaishu.agola27, dharmin16. We have recorded no ownership change.

What can I use instead of rtMedia for WordPress, BuddyPress and bbPress?

Plugins in the same category with a higher Canary Score: Private groups, BuddyDrive, forumAttachments for bbPress, bbPress Notify (No-Spam), WP Discourse.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue