CVE-2025-15485

HIGH CVSS 8.2 View on NVD ↗

Description

The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

References

https://wpscan.com/vulnerability/3e9da619-bce1-49b5-aa35-dce22b72f9e6/

Published: Sep 02, 2026 15:17 UTC Modified: Sep 02, 2026 15:17 UTC