Approved changes feed: RSS · Atom

cpe:2.3:a:themastercut:revision_manager_tmc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThemastercut (fc221ff6-d4b7-5261-a3eb-17605608ea33)
ProductRevision Manager Tmc (2ef77ad0-51cf-5d8b-84be-9aef1486c8c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25411 vulnerable 2026-06-08 07:53:19.778789 WordPress Revision Manager TMC plugin <= 2.8.22 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in themastercut Revision Manager TMC revision-manager-tmc allows Cross Site Request Forgery.This issue affects Revision Manager TMC: from n/a through <= 2.8.22.
Published: 2026-02-19T08:27:05.876Z
Updated: 2026-04-28T16:14:58.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7622 vulnerable 2026-06-08 06:58:22.874781 Revision Manager TMC <= 2.8.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
MEDIUM (4.3)
The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing capability check on the _a_ajaxQuickEmailTestCallback() function in all versions up to, and including, 2.8.19. This makes it possible for authenticated attackers, with subscriber-level access and above, to send emails with arbitrary content to any individual through the vulnerable web server.
Published: 2024-09-06T13:55:14.025Z
Updated: 2026-04-08T16:43:55.443Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.