CVE-2025-49349 - WordPress Reuters Direct plugin <= 3.0.0 - broken access control vulnerability

CVE ID : CVE-2025-49349 Published : Dec. 31, 2025, 2:48 p.m. | 17 minutes ago Description : Missing Authorization vulnerability in Reuters News Agency Reuters Direct allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reuters Direct: from n/a through 3.0.0. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor