PT-2026-20736 · Unknown · Themastercut Revision Manager Tmc

Nabil Irawan · Published 2026-02-19 · Updated 2026-02-19 · CVE-2026-25411

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions themastercut Revision Manager TMC versions n/a through 2.8.22

Description A Cross-Site Request Forgery (CSRF) issue exists in themastercut Revision Manager TMC. This allows attackers to perform actions on behalf of authenticated users without their knowledge. The issue is due to missing CSRF protection.

Recommendations Update to a version later than 2.8.22.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2026-25411

Affected Products

Themastercut Revision Manager Tmc

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-25411 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/revision-manager-tmc/vulnerability/wordpress-revision-manager-tmc-plugin-2-8-22-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2024411350093427158 · Twitter Post