Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2026/02/20 1:27 p.m.5 views

CVE-2026-25411

Cross-Site Request Forgery CSRF vulnerability in themastercut Revision Manager TMC revision-manager-tmc allows Cross Site Request Forgery.This issue affects Revision Manager TMC: from n/a through = 2.8.22...

4.3CVSS5.5AI score0.00107EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 9:16 a.m.7 views

CVE-2026-25411

Cross-Site Request Forgery CSRF vulnerability in themastercut Revision Manager TMC revision-manager-tmc allows Cross Site Request Forgery.This issue affects Revision Manager TMC: from n/a through = 2.8.22...

4.3CVSS0.00107EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/19 8:27 a.m.4 views

CVE-2026-25411 WordPress Revision Manager TMC plugin <= 2.8.22 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in themastercut Revision Manager TMC revision-manager-tmc allows Cross Site Request Forgery.This issue affects Revision Manager TMC: from n/a through = 2.8.22...

5.5AI score0.00107EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/19 8:27 a.m.29 views

CVE-2026-25411 WordPress Revision Manager TMC plugin <= 2.8.22 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in themastercut Revision Manager TMC revision-manager-tmc allows Cross Site Request Forgery.This issue affects Revision Manager TMC: from n/a through = 2.8.22...

4.3CVSS0.00107EPSS
Exploits0References1
CVE
CVE
added 2026/02/19 8:27 a.m.11 views

CVE-2026-25411

CVE-2026-25411 is a CSRF vulnerability in the Revision Manager TMC WordPress plugin, affecting versions up to 2.8.22. The issue is described across multiple sources (NVD, Red Hat, PatchStack, CVE list) as Cross-Site Forgery in Revision Manager TMC. The primary documented impact is CSRF exposure; ...

4.3CVSS5.4AI score0.00107EPSS
Exploits0References1
NVD
NVD
added 2024/09/06 2:15 p.m.27 views

CVE-2024-7622

The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing capability check on the aajaxQuickEmailTestCallback function in all versions up to, and including, 2.8.19. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS0.00351EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/09/06 1:55 p.m.15 views

CVE-2024-7622 Revision Manager TMC <= 2.8.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending

The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing capability check on the aajaxQuickEmailTestCallback function in all versions up to, and including, 2.8.19. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS6.7AI score0.00351EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/09/06 1:55 p.m.27 views

CVE-2024-7622 Revision Manager TMC <= 2.8.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending

The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing capability check on the aajaxQuickEmailTestCallback function in all versions up to, and including, 2.8.19. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS0.00351EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/09/06 2:53 a.m.4 views

WordPress Revision Manager TMC plugin <= 2.8.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Email Sending vulnerability discovered by Lucio Sá in WordPress Plugin Revision Manager TMC versions = 2.8.19...

4.3CVSS7AI score0.00351EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/09/06 12:0 a.m.2 views

WordPress plugin Revision Manager TMC 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.4AI score0.00351EPSS
Exploits0References4
Rows per page
Query Builder