This vulnerability in rtCamp rtMedia for WordPress, BuddyPress, and bbPress allows an attacker with network access to retrieve sensitive system information without any privileges or user interaction. The affected versions include all up to and including 4.7.8. The CVSS 3.1 base score is 5.3, reflecting a network attack vector, low complexity, no privileges required, no user interaction, and limited confidentiality impact. No official patch or remediation details are available from the vendor or advisory sources at this time.

An attacker can gain access to sensitive system information that should be restricted, potentially aiding further attacks or reconnaissance. The impact is limited to confidentiality loss; integrity and availability are not affected. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider restricting network access to the affected plugin's interfaces and monitor for unusual access patterns related to rtMedia. Avoid exposing the vulnerable plugin to untrusted networks.