CVE-2024-7622

The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing capability check on the aajaxQuickEmailTestCallback function in all versions up to, and including, 2.8.19. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2024-7622

CVE-2024-7622 (Revision Manager TMC, WordPress) : The plugin versions up to and including 2.8.19 allow unauthorized arbitrary email sending due to a missing capability check in _a_ajaxQuickEmailTestCallback(). An authenticated attacker with subscriber-level access or higher can send emails with a...

WordPress Revision Manager TMC Plugin <= 2.8.19 is vulnerable to Broken Access Control

Software Revision Manager TMC Type Plugin Vulnerable versions = 2.8.19 Fixed in 2.8.20 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-7622 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5f819b940710 Credits Lucio Sá Required...