This vulnerability in rtCamp rtMedia for WordPress, BuddyPress, and bbPress (up to version 4.7.8) permits exposure of sensitive system information to unauthorized entities. The flaw allows retrieval of embedded sensitive data without requiring privileges or user interaction, with an attack vector over the network. The CVSS v3.1 base score is 5.3, reflecting a medium severity impact primarily on confidentiality. No official patch or remediation details are provided in the available data.

An attacker can obtain sensitive system information without authentication or user interaction, potentially aiding further attacks or reconnaissance. The impact is limited to confidentiality loss; integrity and availability are not affected. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to vulnerable endpoints and monitor for unusual access patterns related to rtMedia components.