CVE-2025-15485

Published: Sep 2, 2026Modified: Sep 3, 2026Deferred

8.2

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Exploitability: 3.9 / Impact: 4.2

Source: contact@wpscan.com (Secondary)

Description

The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc

Related CWEs

CWE-862

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (1)

https://wpscan.com/vulnerability/3e9da619-bce1-49b5-aa35-dce22b72f9e6/

Source: contact@wpscan.com

Timeline

No history available yet.