CVE-2025-9218 - rtMedia Godam Plugin Information Disclosure Vulnerability

CVE ID : CVE-2025-9218 Published : Dec. 13, 2025, 6:28 a.m. | 1 hour, 51 minutes ago Description : The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to to Information Disclosure due to missing authorization in the handle_rest_pre_dispatch() function when the Godam plugin is active, in versions 4.7.0 to 4.7.3. This makes it possible for unauthenticated attackers to retrieve media items associated with draft or private posts. Severity: 3.7 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor