Skip to content
OpenAdvisories

Vendor

rnags

2 known vulnerabilities.

Products

Reuters Direct 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-12579

    Reuters Direct <= 3.0.0 - Missing Authorization to Unauthenticated Settings Reset

    The Reuters Direct plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'logoff' action in all versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to reset the …

    rnags Reuters Direct Web / CMS
  • Medium 4.3
    CVE-2025-12578

    Reuters Direct <= 3.0.0 - Cross-Site Request Forgery to Settings Reset

    The Reuters Direct plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce validation on the the 'class-reuters-direct-settings.php' page. This makes it possible f…

    rnags Reuters Direct Web / CMS