Does rtMedia for WordPress, BuddyPress and bbPress have any unpatched vulnerabilities?

No. All known vulnerabilities in rtMedia for WordPress, BuddyPress and bbPress have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is rtMedia for WordPress, BuddyPress and bbPress compatible with WordPress 6.9.4?

According to WordPress.org data, rtMedia for WordPress, BuddyPress and bbPress 4.7.9 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

What is rtMedia for WordPress, BuddyPress and bbPress's security score?

rtMedia for WordPress, BuddyPress and bbPress has a WP-Safety security score of 75/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

rtMedia for WordPress, BuddyPress and bbPress Security & Risk Analysis

wordpress.org/plugins/buddypress-media

Add albums, photo, audio/video upload, privacy, sharing, front-end uploads & more. All this works on mobile/tablets devices.

8K active installs v4.7.9 PHP + WP 4.1+ Updated Jan 30, 2026

albumaudiobuddypressmediamultimedia

B · Generally Safe

CVEs total12

Unpatched0

Last CVEDec 12, 2025

Plugin page Download

Safety Verdict

Is rtMedia for WordPress, BuddyPress and bbPress Safe to Use in 2026?

Mostly Safe

Score 75/100

rtMedia for WordPress, BuddyPress and bbPress is generally safe to use. 12 past CVEs were resolved. Keep it updated.

12 known CVEsLast CVE: Dec 12, 2025Updated 2mo ago

Risk Assessment

The Buddypress Media plugin v4.7.9 exhibits a mixed security posture. While the plugin demonstrates strong practices in SQL query preparation (93%) and output escaping (96%), several concerning areas are highlighted by the static analysis. A significant attack surface is exposed through 35 AJAX handlers, with 20 lacking authentication checks. This creates a substantial risk for unauthorized actions to be performed by unauthenticated users. The absence of any critical or high-severity taint flows is a positive sign, indicating that direct, exploitable data flow vulnerabilities were not detected in this specific analysis. However, the plugin's vulnerability history is a significant red flag. With 12 known CVEs, including 3 critical and 4 high-severity, and common vulnerability types like SQL Injection, Missing Authorization, and XSS, this suggests a pattern of recurring security weaknesses. The fact that there are currently no unpatched CVEs is commendable, but the historical prevalence of severe vulnerabilities necessitates a high degree of caution. The last recorded vulnerability in 2025 also suggests a recent history of issues.

Key Concerns

20 AJAX handlers without auth checks
12 total known CVEs in vulnerability history
3 critical CVEs in vulnerability history
4 high CVEs in vulnerability history
Common vulnerability types: SQLi, Missing Auth, RFI, XSS

Vulnerabilities

rtMedia for WordPress, BuddyPress and bbPress Security Vulnerabilities

CVEs by Year

1 CVE in 2014

2014

1 CVE in 2015

2015

2 CVEs in 2016

2016

5 CVEs in 2023

2023

2 CVEs in 2024

2024

1 CVE in 2025

2025

Patched Has unpatched

Severity Breakdown

Critical

High

Medium

Low

12 total CVEs

CVE-2025-9218low · 3.7Missing Authorization

rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function

Dec 12, 2025 Patched in 4.7.4 (1d)

WF-7a2420ca-e079-429b-b1f1-47bf1d0a9f71-buddypress-mediahigh · 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection

Apr 29, 2024 Patched in 4.6.19 (95d)

CVE-2024-3293high · 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode

Apr 22, 2024 Patched in 4.6.19 (1d)

CVE-2023-5939high · 7.2Unrestricted Upload of File with Dangerous Type

rtMedia for WordPress, BuddyPress and bbPress WordPress <= 4.6.15 - Authenticated (Admin+) Arbitrary File Upload

Nov 29, 2023 Patched in 4.6.16 (70d)

CVE-2023-5931high · 8.8Unrestricted Upload of File with Dangerous Type

rtMedia for WordPress, BuddyPress and bbPress <= 4.6.15 - Authenticated (Subscriber+) Arbitrary File Upload

Nov 29, 2023 Patched in 4.6.16 (70d)

CVE-2023-41951medium · 4.3Missing Authorization

rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization via export_settings

Sep 6, 2023 Patched in 4.6.15 (139d)

WF-5dfc145e-d2d4-4137-a5c6-dec2ebb41876-buddypress-mediamedium · 4.3Missing Authorization

rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization to Settings Update

Sep 4, 2023 Patched in 4.6.15 (141d)

WF-be837a77-9b25-43af-aaba-94a8aa59e7e3-buddypress-mediamedium · 4.3Missing Authorization

rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization to Sensitive Information Exposure

Sep 4, 2023 Patched in 4.6.15 (141d)

WF-be97e1ca-6c9c-4641-ba7c-bbb14a58d99e-buddypress-mediacritical · 9.8Unrestricted Upload of File with Dangerous Type

rtMedia for WordPress, BuddyPress and bbPress <= 4.2 - Arbitary File Upload

Dec 21, 2016 Patched in 4.2.1 (2589d)

WF-7b19b0b2-d6cb-4d92-9925-c77d517ddfb7-buddypress-mediamedium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

rtMedia for WordPress, BuddyPress and bbPress <= 3.10.1 - Cross-Site Scripting

Jan 28, 2016 Patched in 3.10.2 (2917d)

WF-9ba74e58-0647-4283-9fa3-428976c54474-buddypress-mediacritical · 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

rtMedia for WordPress, BuddyPress and bbPress < 3.7.40 - SQL Injection

Apr 28, 2015 Patched in 3.7.40 (3192d)

WF-1814ad55-0807-4def-b584-6dbbc5d6eb72-buddypress-mediacritical · 9.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

rtMedia for WordPress, BuddyPress and bbPress <= 3.9.5 - Local File Inclusion

Nov 24, 2014 Patched in 3.10 (3846d)

Code Analysis

Analyzed Mar 16, 2026

rtMedia for WordPress, BuddyPress and bbPress Code Analysis

Dangerous Functions

Raw SQL Queries

193 prepared

Unescaped Output

1446 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

93% prepared208 total queries

Output Escaping

96% escaped1501 total outputs

Data Flows

All sanitized

Data Flow Analysis

4 flows

rtmedia_admin_upload (app\helper\rtUploadAttachment.php:23)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

20 unprotected

rtMedia for WordPress, BuddyPress and bbPress Attack Surface

Entry Points37

Unprotected20

AJAX Handlers 35

authwp_ajax_rtmedia_select_requestapp\admin\RTMediaAdmin.php:82

authwp_ajax_rtmedia_cancel_requestapp\admin\RTMediaAdmin.php:84

authwp_ajax_rtmedia_submit_requestapp\admin\RTMediaAdmin.php:86

authwp_ajax_rtmedia_linkbackapp\admin\RTMediaAdmin.php:88

authwp_ajax_rtmedia_rt_album_deactivateapp\admin\RTMediaAdmin.php:89

authwp_ajax_rtmedia_rt_album_importapp\admin\RTMediaAdmin.php:90

authwp_ajax_rtmedia_rt_album_import_favoritesapp\admin\RTMediaAdmin.php:91

authwp_ajax_rtmedia_rt_album_import_step_favoritesapp\admin\RTMediaAdmin.php:92

authwp_ajax_rtmedia_rt_album_cleanupapp\admin\RTMediaAdmin.php:93

authwp_ajax_rtmedia_convert_videos_formapp\admin\RTMediaAdmin.php:94

authwp_ajax_rtmedia_correct_upload_filetypesapp\admin\RTMediaAdmin.php:95

authwp_ajax_rtmedia_export_settingsapp\admin\RTMediaAdmin.php:98

authwp_ajax_rtmedia_hide_addon_update_noticeapp\admin\RTMediaAdmin.php:99

authwp_ajax_install_transcoder_hide_admin_noticeapp\admin\RTMediaAdmin.php:119

authwp_ajax_install_godam_hide_admin_noticeapp\admin\RTMediaAdmin.php:127

authwp_ajax_rtmedia_hide_template_override_noticeapp\admin\RTMediaAdmin.php:156

authwp_ajax_rtmedia_hide_inspirebook_release_noticeapp\admin\RTMediaAdmin.php:165

authwp_ajax_rtmedia_hide_social_sync_noticeapp\admin\RTMediaAdmin.php:173

authwp_ajax_rtmedia_hide_premium_addon_noticeapp\admin\RTMediaAdmin.php:181

authwp_ajax_rtmedia_admin_uploadapp\helper\rtUploadAttachment.php:14

authwp_ajax_rtmedia_activity_upgradeapp\importers\RTMediaActivityUpgrade.php:23

authwp_ajax_rtmedia_activity_done_upgradeapp\importers\RTMediaActivityUpgrade.php:24

authwp_ajax_rtmedia_media_size_importapp\importers\RTMediaMediaSizeImporter.php:21

authwp_ajax_rtmedia_hide_media_size_import_noticeapp\importers\RTMediaMediaSizeImporter.php:24

authwp_ajax_bp_media_rt_db_migrationapp\importers\RTMediaMigration.php:30

noprivwp_ajax_rtmedia_apiapp\main\controllers\api\RTMediaJsonApi.php:162

authwp_ajax_rtmedia_apiapp\main\controllers\api\RTMediaJsonApi.php:163

authwp_ajax_rtm_change_activity_privacyapp\main\controllers\privacy\RTMediaPrivacy.php:57

authwp_ajax_rtmedia_get_templateapp\main\controllers\shortcodes\RTMediaGalleryShortcode.php:26

noprivwp_ajax_rtmedia_get_templateapp\main\controllers\shortcodes\RTMediaGalleryShortcode.php:27

authwp_ajax_delete_uploaded_mediaapp\main\controllers\template\rtmedia-ajax-actions.php:81

authwp_ajax_rtmedia_backbone_templateapp\main\controllers\template\RTMediaAJAX.php:19

authwp_ajax_rtmedia_create_albumapp\main\controllers\template\RTMediaAJAX.php:20

authwp_ajax_rtmedia_include_gallery_itemapp\main\routers\RTMediaRouter.php:43

authwp_ajax_get_single_activity_comment_htmltemplates\media\godam-integration.php:191

Shortcodes 2

[rtmedia_gallery] app\main\controllers\shortcodes\RTMediaGalleryShortcode.php:25

[rtmedia_uploader] app\main\controllers\shortcodes\RTMediaUploadShortcode.php:40

WordPress Hooks 278

actioninitapp\admin\RTMediaAdmin.php:78

filterplugin_row_metaapp\admin\RTMediaAdmin.php:96

actionwp_dashboard_setupapp\admin\RTMediaAdmin.php:97

filtermedia_row_actionsapp\admin\RTMediaAdmin.php:107

actionnetwork_admin_noticesapp\admin\RTMediaAdmin.php:116

actionadmin_noticesapp\admin\RTMediaAdmin.php:118

actionnetwork_admin_noticesapp\admin\RTMediaAdmin.php:124

actionadmin_noticesapp\admin\RTMediaAdmin.php:126

actionadmin_bar_menuapp\admin\RTMediaAdmin.php:132

actionadmin_bar_menuapp\admin\RTMediaAdmin.php:136

actionadmin_enqueue_scriptsapp\admin\RTMediaAdmin.php:141

actionadmin_menuapp\admin\RTMediaAdmin.php:142

actioninitapp\admin\RTMediaAdmin.php:143

actionnetwork_admin_edit_rtmediaapp\admin\RTMediaAdmin.php:146

actionadmin_initapp\admin\RTMediaAdmin.php:153

actionadmin_initapp\admin\RTMediaAdmin.php:164

actionadmin_noticesapp\admin\RTMediaAdmin.php:187

actionnetwork_admin_noticesapp\admin\RTMediaAdmin.php:188

actionadmin_initapp\admin\RTMediaAdmin.php:189

actionadmin_initapp\admin\RTMediaAdmin.php:190

filterremovable_query_argsapp\admin\RTMediaAdmin.php:192

actionadmin_footerapp\admin\RTMediaAdmin.php:194

actionadmin_noticesapp\admin\RTMediaAdmin.php:197

actionadmin_noticesapp\admin\RTMediaAdmin.php:416

actionbp_admin_tabsapp\admin\RTMediaAdmin.php:532

actioninitapp\admin\RTMediaUploadTermsAdmin.php:40

actionadmin_enqueue_scriptsapp\admin\RTMediaUploadTermsAdmin.php:42

filterrtmedia_general_content_default_valuesapp\admin\RTMediaUploadTermsAdmin.php:43

filterrtmedia_general_content_groupsapp\admin\RTMediaUploadTermsAdmin.php:44

filterrtmedia_general_content_add_itmesapp\admin\RTMediaUploadTermsAdmin.php:45

actionsafe_style_cssapp\helper\RTMediaAdminWidget.php:27

actionbp_initapp\helper\RTMediaCommentNotification.php:44

filterrtmedia_comment_notificationsapp\helper\RTMediaCommentNotification.php:53

actionrtmedia_after_add_commentapp\helper\RTMediaCommentNotification.php:54

actionrtmedia_after_mediaapp\helper\RTMediaCommentNotification.php:55

actionrtmedia_before_remove_commentapp\helper\RTMediaCommentNotification.php:56

actionbp_initapp\helper\RTMediaLikeNotification.php:44

filterrtmedia_like_notificationsapp\helper\RTMediaLikeNotification.php:53

actionrtmedia_after_like_mediaapp\helper\RTMediaLikeNotification.php:54

actionrtmedia_after_mediaapp\helper\RTMediaLikeNotification.php:55

actionbp_setup_globalsapp\helper\RTMediaNotification.php:54

actionadmin_initapp\helper\RTMediaSettings.php:25

actioninitapp\helper\RTMediaSettings.php:34

filterwp_mail_content_typeapp\helper\RTMediaSupport.php:509

filterrtmedia_filter_admin_pages_arrayapp\importers\RTMediaActivityUpgrade.php:20

actionadmin_initapp\importers\RTMediaActivityUpgrade.php:21

actionadmin_menuapp\importers\RTMediaActivityUpgrade.php:22

actionadmin_noticesapp\importers\RTMediaActivityUpgrade.php:89

filterrtmedia_filter_admin_pages_arrayapp\importers\RTMediaMediaSizeImporter.php:20

actionadmin_initapp\importers\RTMediaMediaSizeImporter.php:22

actionadmin_menuapp\importers\RTMediaMediaSizeImporter.php:23

actionadmin_noticesapp\importers\RTMediaMediaSizeImporter.php:94

actionadmin_menuapp\importers\RTMediaMigration.php:29

actionadmin_noticesapp\importers\RTMediaMigration.php:62

filteroption_comment_max_linksapp\main\controllers\activity\RTMediaActivity.php:216

actionbp_after_activity_post_formapp\main\controllers\activity\RTMediaBuddyPressActivity.php:21

actionbp_activity_posted_updateapp\main\controllers\activity\RTMediaBuddyPressActivity.php:22

actionbp_activity_posted_updateapp\main\controllers\activity\RTMediaBuddyPressActivity.php:25

actionbp_groups_posted_updateapp\main\controllers\activity\RTMediaBuddyPressActivity.php:26

filterbp_activity_truncate_entryapp\main\controllers\activity\RTMediaBuddyPressActivity.php:35

filterb_e_a_plugin_option_editable_typesapp\main\controllers\activity\RTMediaBuddyPressActivity.php:38

actionbp_activity_comment_postedapp\main\controllers\activity\RTMediaBuddyPressActivity.php:40

actionbp_activity_delete_commentapp\main\controllers\activity\RTMediaBuddyPressActivity.php:41

filterbp_activity_allowed_tagsapp\main\controllers\activity\RTMediaBuddyPressActivity.php:42

filterbp_get_activity_parent_contentapp\main\controllers\activity\RTMediaBuddyPressActivity.php:43

filterbp_activity_content_before_saveapp\main\controllers\activity\RTMediaBuddyPressActivity.php:44

filterbp_activity_type_before_saveapp\main\controllers\activity\RTMediaBuddyPressActivity.php:45

actionbp_activity_deleted_activitiesapp\main\controllers\activity\RTMediaBuddyPressActivity.php:46

filterbp_activity_prefetch_object_dataapp\main\controllers\activity\RTMediaBuddyPressActivity.php:49

filterbp_get_activity_action_pre_metaapp\main\controllers\activity\RTMediaBuddyPressActivity.php:51

actionrtmedia_after_like_mediaapp\main\controllers\activity\RTMediaBuddyPressActivity.php:55

actionrtmedia_after_add_commentapp\main\controllers\activity\RTMediaBuddyPressActivity.php:60

actionrtmedia_before_remove_commentapp\main\controllers\activity\RTMediaBuddyPressActivity.php:61

filterbp_activity_user_can_deleteapp\main\controllers\activity\RTMediaBuddyPressActivity.php:64

filterbp_activity_permalink_accessapp\main\controllers\activity\RTMediaBuddyPressActivity.php:66

actionbp_activity_comment_postedapp\main\controllers\activity\RTMediaBuddyPressActivity.php:67

filterbp_ajax_querystringapp\main\controllers\activity\RTMediaBuddyPressActivity.php:72

filterbp_after_has_activities_parse_argsapp\main\controllers\activity\RTMediaBuddyPressActivity.php:73

actionbp_activity_after_saveapp\main\controllers\activity\RTMediaBuddyPressActivity.php:76

actionbp_activity_after_deleteapp\main\controllers\activity\RTMediaBuddyPressActivity.php:77

filterbea_get_activity_contentapp\main\controllers\activity\RTMediaBuddyPressActivity.php:81

filterbea_activity_contentapp\main\controllers\activity\RTMediaBuddyPressActivity.php:82

filterbp_before_activity_post_update_parse_argsapp\main\controllers\activity\RTMediaBuddyPressActivity.php:86

filterrtmedia_current_userapp\main\controllers\api\RTMediaJsonApi.php:200

filterupload_dirapp\main\controllers\api\RTMediaJsonApi.php:1204

filterbp_before_groups_post_update_parse_argsapp\main\controllers\group\RTMediaBuddyPressGroupActivity.php:20

actioninitapp\main\controllers\media\RTMediaAlbum.php:26

actioninitapp\main\controllers\media\RTMediaAlbum.php:27

filterrt_db_model_per_pageapp\main\controllers\media\RTMediaAlbum.php:413

filterrt_db_model_per_pageapp\main\controllers\media\RTMediaAlbum.php:475

filterrtmedia_addons_action_buttonsapp\main\controllers\media\RTMediaFeatured.php:62

filterrtmedia_author_media_optionsapp\main\controllers\media\RTMediaFeatured.php:63

actionrtmedia_featured_button_filterapp\main\controllers\media\RTMediaFeatured.php:65

actionrtmedia_before_itemapp\main\controllers\media\RTMediaGalleryItemAction.php:19

filterrtmedia_media_array_backboneapp\main\controllers\media\RTMediaGalleryItemAction.php:21

filterrtmedia_gallery_class_filterapp\main\controllers\media\RTMediaGalleryItemAction.php:23

actionrtmedia_before_media_galleryapp\main\controllers\media\RTMediaGalleryItemAction.php:25

filterrtmedia_addons_action_buttonsapp\main\controllers\media\RTMediaGroupFeatured.php:62

filterrtmedia_author_media_optionsapp\main\controllers\media\RTMediaGroupFeatured.php:63

actionrtmedia_action_buttons_after_mediaapp\main\controllers\media\RTMediaLike.php:43

actionrtmedia_actions_before_commentsapp\main\controllers\media\RTMediaLike.php:44

actionlike_button_no_commentsapp\main\controllers\media\RTMediaLike.php:45

actionrtmedia_like_button_filterapp\main\controllers\media\RTMediaLike.php:46

actionrtmedia_actions_without_lightboxapp\main\controllers\media\RTMediaLike.php:49

filterrtmedia_check_enable_disable_likeapp\main\controllers\media\RTMediaLike.php:52

actionrtmedia_album_gallery_actionsapp\main\controllers\media\RTMediaLoginPopup.php:18

actionrtmedia_media_gallery_actionsapp\main\controllers\media\RTMediaLoginPopup.php:19

actionrtmedia_before_media_galleryapp\main\controllers\media\RTMediaLoginPopup.php:20

actionrtmedia_before_album_galleryapp\main\controllers\media\RTMediaLoginPopup.php:21

actionrtmedia_before_media_galleryapp\main\controllers\media\RTMediaLoginPopup.php:23

actionrtmedia_before_album_galleryapp\main\controllers\media\RTMediaLoginPopup.php:24

actiondelete_attachmentapp\main\controllers\media\RTMediaMedia.php:107

actiondelete_userapp\main\controllers\media\RTMediaMedia.php:108

filterintermediate_image_sizesapp\main\controllers\media\RTMediaMedia.php:648

filterrtmedia_query_actionsapp\main\controllers\media\RTMediaUserInteraction.php:189

filterrtmedia_action_buttons_before_deleteapp\main\controllers\media\RTMediaUserInteraction.php:192

filterrtmedia_action_buttons_after_deleteapp\main\controllers\media\RTMediaViewCount.php:25

actionbp_setup_navapp\main\controllers\privacy\RTMediaPrivacy.php:37

actionbp_template_contentapp\main\controllers\privacy\RTMediaPrivacy.php:38

filterbp_activity_get_user_join_filterapp\main\controllers\privacy\RTMediaPrivacy.php:39

filterbp_activity_get_user_join_filterapp\main\controllers\privacy\RTMediaPrivacy.php:42

filterbp_use_legacy_activity_queryapp\main\controllers\privacy\RTMediaPrivacy.php:44

actionbp_actionsapp\main\controllers\privacy\RTMediaPrivacy.php:45

actionbp_activity_entry_metaapp\main\controllers\privacy\RTMediaPrivacy.php:48

filterbp_activity_has_more_itemsapp\main\controllers\privacy\RTMediaPrivacy.php:51

actiontemplate_noticesapp\main\controllers\privacy\RTMediaPrivacy.php:54

actionfriends_friendship_acceptedapp\main\controllers\privacy\RTMediaPrivacy.php:60

actionfriends_friendship_deletedapp\main\controllers\privacy\RTMediaPrivacy.php:61

filterrtmedia-model-where-queryapp\main\controllers\shortcodes\RTMediaGalleryShortcode.php:302

filterrtmedia-model-where-queryapp\main\controllers\shortcodes\RTMediaGalleryShortcode.php:317

actionafter_rtmedia_action_buttonsapp\main\controllers\template\rtmedia-actions.php:50

actionrtmedia_add_edit_tab_titleapp\main\controllers\template\rtmedia-actions.php:72

actionrtmedia_add_edit_tab_contentapp\main\controllers\template\rtmedia-actions.php:102

actionrtmedia_add_edit_fieldsapp\main\controllers\template\rtmedia-actions.php:140

actionrtmedia_media_gallery_actionsapp\main\controllers\template\rtmedia-actions.php:179

actionrtmedia_album_gallery_actionsapp\main\controllers\template\rtmedia-actions.php:180

actionrtmedia_before_media_galleryapp\main\controllers\template\rtmedia-actions.php:200

actionrtmedia_before_album_galleryapp\main\controllers\template\rtmedia-actions.php:201

actionrtmedia_before_media_galleryapp\main\controllers\template\rtmedia-actions.php:231

actionrtmedia_before_album_galleryapp\main\controllers\template\rtmedia-actions.php:232

actionrtmedia_before_itemapp\main\controllers\template\rtmedia-actions.php:257

actionrtmedia_query_actionsapp\main\controllers\template\rtmedia-actions.php:272

actionrtmedia_media_gallery_actionsapp\main\controllers\template\rtmedia-actions.php:307

actionrtmedia_album_gallery_actionsapp\main\controllers\template\rtmedia-actions.php:308

actionwp_footerapp\main\controllers\template\rtmedia-actions.php:347

actionrtmedia_before_mediaapp\main\controllers\template\rtmedia-actions.php:366

actiongroups_settings_updatedapp\main\controllers\template\rtmedia-actions.php:403

actionrtmedia_after_media_galleryapp\main\controllers\template\rtmedia-actions.php:437

actionsanitize_file_nameapp\main\controllers\template\rtmedia-actions.php:465

actionrtmedia_upload_set_post_objectapp\main\controllers\template\rtmedia-actions.php:467

actionrtmedia_admin_page_insertapp\main\controllers\template\rtmedia-actions.php:481

actionrtmedia_before_template_loadapp\main\controllers\template\rtmedia-actions.php:490

actionrtmedia_pre_templateapp\main\controllers\template\rtmedia-actions.php:508

actionrtmedia_after_album_gallery_itemapp\main\controllers\template\rtmedia-actions.php:665

actionadmin_initapp\main\controllers\template\rtmedia-actions.php:777

actionadmin_noticesapp\main\controllers\template\rtmedia-actions.php:801

actionbp_activity_register_activity_actionsapp\main\controllers\template\rtmedia-actions.php:820

actionrtmedia_media_gallery_actionsapp\main\controllers\template\rtmedia-actions.php:942

actionrtmedia_album_gallery_actionsapp\main\controllers\template\rtmedia-actions.php:943

actionadmin_initapp\main\controllers\template\rtmedia-actions.php:955

filterredirect_canonicalapp\main\controllers\template\rtmedia-actions.php:974

actionpre_get_postsapp\main\controllers\template\rtmedia-actions.php:1005

actionpre_get_postsapp\main\controllers\template\rtmedia-actions.php:1078

actionrtmedia_add_rewrite_rulesapp\main\controllers\template\rtmedia-actions.php:1103

actionrtmedia_after_mediaapp\main\controllers\template\rtmedia-actions.php:1124

actionrtmedia_after_mediaapp\main\controllers\template\rtmedia-actions.php:1141

actionrtmedia_gallery_after_titleapp\main\controllers\template\rtmedia-actions.php:1171

actionrtmedia_after_media_gallery_titleapp\main\controllers\template\rtmedia-actions.php:1187

actiontranscoded_media_addedapp\main\controllers\template\rtmedia-ajax-actions.php:122

actionrtmedia_actions_before_commentsapp\main\controllers\template\rtmedia-ajax-actions.php:137

actionrtmedia_actions_before_commentsapp\main\controllers\template\rtmedia-ajax-actions.php:157

actionbp_activity_after_saveapp\main\controllers\template\rtmedia-ajax-actions.php:229

actionbp_activity_content_before_saveapp\main\controllers\template\rtmedia-ajax-actions.php:255

actionrtmedia_before_media_galleryapp\main\controllers\template\rtmedia-filters.php:52

filterrtmedia_gallery_actionsapp\main\controllers\template\rtmedia-filters.php:63

filterrtmedia_gallery_actionsapp\main\controllers\template\rtmedia-filters.php:127

filterbp_activity_get_typesapp\main\controllers\template\rtmedia-filters.php:142

filterrtm_main_template_buddypress_enableapp\main\controllers\template\rtmedia-filters.php:168

filterrtmedia_media_gallery_show_media_titleapp\main\controllers\template\rtmedia-filters.php:190

filterrtmedia_gallery_list_item_a_classapp\main\controllers\template\rtmedia-filters.php:213

filterrtmedia_modify_upload_paramsapp\main\controllers\template\rtmedia-filters.php:243

filterdocument_title_partsapp\main\controllers\template\rtmedia-filters.php:267

filterrtmedia_single_content_filterapp\main\controllers\template\rtmedia-filters.php:320

filterrtmedia_single_content_filterapp\main\controllers\template\rtmedia-filters.php:390

filterbp_get_activity_content_bodyapp\main\controllers\template\rtmedia-filters.php:488

filtershow_custom_album_coverapp\main\controllers\template\rtmedia-filters.php:555

filterget_comment_linkapp\main\controllers\template\rtmedia-filters.php:574

filterattachment_linkapp\main\controllers\template\rtmedia-filters.php:593

filterwp_update_attachment_metadataapp\main\controllers\template\rtmedia-filters.php:668

filterrtmedia_media_edit_privapp\main\controllers\template\rtmedia-filters.php:693

filterrtmedia_author_actionsapp\main\controllers\template\rtmedia-filters.php:719

filterrtmedia_like_html_you_and_more_likeapp\main\controllers\template\rtmedia-filters.php:736

filterrtmedia-model-where-queryapp\main\controllers\template\rtmedia-filters.php:837

filterrtmedia-get-album-where-queryapp\main\controllers\template\rtmedia-filters.php:838

filterrtmedia-get-group-album-where-queryapp\main\controllers\template\rtmedia-filters.php:839

filterrtmedia-model-join-queryapp\main\controllers\template\rtmedia-filters.php:883

filterrtmedia-model-query-columnsapp\main\controllers\template\rtmedia-filters.php:906

filterbp_activity_get_metaapp\main\controllers\template\rtmedia-filters.php:925

filterrtmedia_gallery_shortcode_parameter_pre_filterapp\main\controllers\template\rtmedia-filters.php:944

filterwp_privacy_personal_data_exportersapp\main\controllers\template\rtmedia-filters.php:977

filterwp_privacy_personal_data_erasersapp\main\controllers\template\rtmedia-filters.php:1005

actioninitapp\main\controllers\template\rtmedia-functions.php:2217

filterqueryapp\main\controllers\template\rtmedia-functions.php:2359

filterqueryapp\main\controllers\template\rtmedia-functions.php:2387

filterqueryapp\main\controllers\template\rtmedia-functions.php:2415

filterqueryapp\main\controllers\template\rtmedia-functions.php:2441

actionbefore_rtmedia_comment_uploader_displayapp\main\controllers\template\rtmedia-functions.php:4143

actionrtmedia_add_comments_extraapp\main\controllers\template\rtmedia-functions.php:4180

actionbp_activity_entry_commentsapp\main\controllers\template\rtmedia-functions.php:4183

actionadmin_bar_menuapp\main\controllers\template\RTMediaNav.php:31

actionbp_parse_queryapp\main\controllers\template\RTMediaNav.php:34

filterbp_nouveau_nav_has_countapp\main\controllers\template\RTMediaNav.php:35

filterbp_nouveau_get_nav_countapp\main\controllers\template\RTMediaNav.php:36

filterbp_settings_admin_navapp\main\controllers\template\RTMediaNav.php:39

actionwp_enqueue_scriptsapp\main\controllers\template\RTMediaTemplate.php:29

actionwp_enqueue_scriptsapp\main\controllers\template\RTMediaTemplate.php:35

filterrtmedia-model-where-queryapp\main\controllers\template\RTMediaTemplate.php:292

filterrtmedia-get-album-where-queryapp\main\controllers\template\RTMediaTemplate.php:293

filterrtmedia-get-group-album-where-queryapp\main\controllers\template\RTMediaTemplate.php:294

filterrtmedia-model-join-queryapp\main\controllers\template\RTMediaTemplate.php:295

filterrtmedia-model-query-columnsapp\main\controllers\template\RTMediaTemplate.php:296

filterintermediate_image_sizes_advancedapp\main\controllers\template\RTMediaTemplate.php:349

actionrtmedia_before_template_loadapp\main\controllers\template\RTMediaTemplate.php:465

actionrtmedia_before_template_loadapp\main\controllers\template\RTMediaTemplate.php:467

filterupload_dirapp\main\controllers\upload\processors\RTMediaUploadFile.php:81

actionrtmedia_upload_redirectapp\main\controllers\upload\RTMediaUploadEndpoint.php:25

actioninitapp\main\interactions\RTMediaInteraction.php:45

actioninitapp\main\interactions\RTMediaInteraction.php:46

actioninitapp\main\interactions\RTMediaInteraction.php:47

actioninitapp\main\interactions\RTMediaInteraction.php:48

actiontemplate_redirectapp\main\interactions\RTMediaInteraction.php:51

filterwp_titleapp\main\interactions\RTMediaInteraction.php:53

filterwpseo_opengraph_titleapp\main\interactions\RTMediaInteraction.php:54

filterwpseo_frontend_presentersapp\main\interactions\RTMediaInteraction.php:55

filterwpseo_opengraph_urlapp\main\interactions\RTMediaInteraction.php:56

filterwpseo_opengraph_descapp\main\interactions\RTMediaInteraction.php:57

filterrtmedia-model-where-queryapp\main\routers\query\RTMediaQuery.php:181

filterrtmedia-model-where-queryapp\main\routers\query\RTMediaQuery.php:662

filterrtmedia-model-where-queryapp\main\routers\query\RTMediaQuery.php:674

filterrtmedia-before-templateapp\main\routers\query\RTMediaQuery.php:686

filterrtmedia_gallery_list_item_a_classapp\main\routers\query\RTMediaQuery.php:847

filterrtmedia_media_gallery_show_media_titleapp\main\routers\query\RTMediaQuery.php:857

filtertemplate_includeapp\main\routers\RTMediaRouter.php:42

filterthe_contentapp\main\routers\RTMediaRouter.php:170

filterpre_render_blockapp\main\routers\RTMediaRouter.php:171

actioninitapp\main\RTMedia.php:110

actionplugins_loadedapp\main\RTMedia.php:111

actionplugins_loadedapp\main\RTMedia.php:112

actionplugins_loadedapp\main\RTMedia.php:113

actionwp_enqueue_scriptsapp\main\RTMedia.php:114

actionwp_enqueue_scriptsapp\main\RTMedia.php:115

actionwp_enqueue_scriptsapp\main\RTMedia.php:118

actionadmin_enqueue_scriptsapp\main\RTMedia.php:119

actiongroups_settings_updatedapp\main\RTMedia.php:122

actiongroups_delete_groupapp\main\RTMedia.php:123

filterintermediate_image_sizes_advancedapp\main\RTMedia.php:131

filterintermediate_image_sizesapp\main\RTMedia.php:132

filtersite_option_upload_filetypesapp\main\RTMedia.php:133

filterimage_size_names_chooseapp\main\RTMedia.php:134

filterbp_activity_maybe_load_mentions_scriptsapp\main\RTMedia.php:294

filterjpeg_qualityapp\main\RTMedia.php:314

actionwp_headapp\main\RTMedia.php:370

actionrt_db_upgradeapp\main\RTMedia.php:976

actionrt_db_upgradeapp\main\RTMedia.php:977

actionrt_db_upgradeapp\main\RTMedia.php:978

actionrt_db_upgradeapp\main\RTMedia.php:979

filterbp_get_root_domainapp\main\RTMedia.php:2099

actionwp_footerapp\main\RTMedia.php:2267

actionadmin_initapp\main\RTMedia.php:2287

actionwp_enqueue_scriptsapp\main\RTMediaUploadTerms.php:27

filterrtmedia_uploader_before_start_upload_buttonapp\main\RTMediaUploadTerms.php:30

filterrtmedia_uploader_after_activity_upload_buttonapp\main\RTMediaUploadTerms.php:40

filterdynamic_sidebar_paramsapp\main\RTMediaUploadTerms.php:50

actionwp_enqueue_scriptstemplates\media\godam-integration.php:20

actionbp_enqueue_scriptstemplates\media\godam-integration.php:21

actionwp_enqueue_scriptstemplates\media\godam-integration.php:48

filterbp_get_activity_content_bodytemplates\media\godam-integration.php:89

actionwp_enqueue_scriptstemplates\media\godam-integration.php:375

Maintenance & Trust

rtMedia for WordPress, BuddyPress and bbPress Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedJan 30, 2026

PHP min version

Downloads1.3M

Community Trust

Rating74/100

Number of ratings152

Active installs8K

Alternatives

rtMedia for WordPress, BuddyPress and bbPress Alternatives

Mixed Media Gallery Blocks

simply-gallery-block

Create mixed media galleries with images, HTML5 video, YouTube, Vimeo, and VideoPress — all in one gallery by Simply Gallery.

40K 7 CVEs

Transcoder

transcoder

Transcoding services for ANY WordPress website. Convert audio/video files of any format to a web-friendly format (mp3/mp4).

500 2 CVEs

BuddyPress Album

bp-album

Photo Albums for BuddyPress. Includes Posts to Activity Stream, Member Comments, and Gallery Privacy Controls.

70 No CVEs

BuddyPics

buddypics

Photo Albums for BuddyPress. Includes Posts to Activity Stream, Member Comments, and Gallery Privacy Controls.

20 No CVEs

Harmonia

harmonia

Harmonia turns any link to an MP3 or M4A file into a minimalist inline audio player.

20 No CVEs

Developer Profile

rtMedia for WordPress, BuddyPress and bbPress Developer Profile

rtCamp

19 plugins · 119K total installs

trust score

Avg Security Score

94/100

Avg Patch Time

883 days

View full developer profile

Detection Fingerprints

How We Detect rtMedia for WordPress, BuddyPress and bbPress

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/buddypress-media/app/admin/css/rtmedia-admin.css/wp-content/plugins/buddypress-media/app/admin/js/rtmedia-admin.js/wp-content/plugins/buddypress-media/app/main/css/rtmedia.css/wp-content/plugins/buddypress-media/app/main/css/rtmedia-shortcodes.css/wp-content/plugins/buddypress-media/app/main/js/rtmedia.js/wp-content/plugins/buddypress-media/lib/audioplayer/css/audioplayer.css/wp-content/plugins/buddypress-media/lib/audioplayer/js/audioplayer.js/wp-content/plugins/buddypress-media/lib/css/wp-mediaelement.css+5 more

Script Paths

/wp-content/plugins/buddypress-media/app/admin/js/rtmedia-admin.js/wp-content/plugins/buddypress-media/app/main/js/rtmedia.js/wp-content/plugins/buddypress-media/lib/audioplayer/js/audioplayer.js/wp-content/plugins/buddypress-media/lib/js/wp-mediaelement.js/wp-content/plugins/buddypress-media/templates/media/bp-album-importer.js/wp-content/plugins/buddypress-media/templates/media/meta.js

Version Parameters

buddypress-media/app/admin/css/rtmedia-admin.css?ver=buddypress-media/app/admin/js/rtmedia-admin.js?ver=buddypress-media/app/main/css/rtmedia.css?ver=buddypress-media/app/main/css/rtmedia-shortcodes.css?ver=buddypress-media/app/main/js/rtmedia.js?ver=buddypress-media/lib/audioplayer/css/audioplayer.css?ver=buddypress-media/lib/audioplayer/js/audioplayer.js?ver=buddypress-media/lib/css/wp-mediaelement.css?ver=buddypress-media/lib/js/wp-mediaelement.js?ver=buddypress-media/templates/media/bp-album-importer.css?ver=buddypress-media/templates/media/bp-album-importer.js?ver=buddypress-media/templates/media/meta.css?ver=buddypress-media/templates/media/meta.js?ver=

HTML / DOM Fingerprints

CSS Classes

rtmedia-containerrtmedia-shortcodertmedia-activity-streamrtmedia-album-wrapperrtmedia-upload-form-containerrtmedia-media-singlertmedia-media-galleryrtmedia-privacy-options+2 more

HTML Comments

+1 more

Data Attributes

data-rtmedia-iddata-rtmedia-typedata-rtmedia-privacy

JS Globals

rtMediartmedia_varsrtmedia_album_importer_vars

REST Endpoints

/wp-json/rtmedia/v1/media/wp-json/rtmedia/v1/albums/wp-json/rtmedia/v1/settings

Shortcode Output

[rtmedia][rtmedia_gallery][rtmedia_album][rtmedia_activity]

FAQ