Known vulnerabilities in Revision Manager TMC

Clone your post, page or custom post type to a draft. Draft up revisions of live, published content. Accept posts. It works with ACF...

2Reported vulnerabilities

4.3Highest CVSS score

2.8.24Latest version

1,000+Active installs

What to do now

Update Revision Manager TMC to 2.8.20 or later. 1 of these have a fixed version available. Updating resolves them.

Plugin last updated: April 27, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2026-25411	Medium 4.3	0.1%	2.8.22 and earlier	—	January 28, 2026
CVE-2024-7622	Medium 4.3	0.4%	Before 2.8.20	`2.8.20`	September 6, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.