CVE-2026-16482

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'compare' parameter in all versions up to, and including, 4.7.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2026-16482 rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'compare' parameter in all versions up to, and including, 4.7.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2026-16482

The rtMedia for WordPress, BuddyPress and bbPress plugin (up to and including 4.7.11 ) is vulnerable to an unauthenticated time-based blind SQL Injection via the compare parameter. The root cause lies in RTMediaQuery::query(), which merges $_REQUEST into the internal query while only validating t...

EUVD-2026-76828

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'compare' parameter in all versions up to, and including, 4.7.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

PT-2023-32596 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: osCommerce version 4 Description: A problematic issue was found in osCommerce, affecting some unknown functionality of the file /catalog/compare of the component Instant Message Handler. The manipulation of the compare argument with a malicio...

Path traversal

listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path...

CVE-2007-3079

listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path...

Gently bypass your line of Defense--the overbearing Conan picture management system-vulnerability warning-the black bar safety net

The other day when browsing a site when, for a moment, hands itching, in the URL behind a“ and 1=2”is intended to take a look at this system there is no SQL injection vulnerability, which know that the browser POPs up two dialog boxes and then unlimited pop-up window. Had to finish off the proces...