CVE-2026-59549

An unauthenticated SQL injection vulnerability exists in the rtMedia plugin for WordPress, affecting versions up to 4.7.10, allowing attackers to execute arbitrary SQL queries. This critical flaw can lead to unauthorized access to sensitive data and potential site compromise. WordPress site administrators using the affected plugin should prioritize immediate updates to mitigate the risk.