CVE-2024-7622 Revision Manager TMC <= 2.8.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending

The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing capability check on the aajaxQuickEmailTestCallback function in all versions up to, and including, 2.8.19. This makes it possible for authenticated attackers, with subscriber-level...

WordPress Revision Manager TMC Plugin <= 2.8.19 is vulnerable to Broken Access Control

Software Revision Manager TMC Type Plugin Vulnerable versions = 2.8.19 Fixed in 2.8.20 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-7622 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5f819b940710 Credits Lucio Sá Required...