CVE-2025-15485 | BDVDB-2026-367231 Detail
Auto x LINE
Description#
The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact low, availability impact none. Attack vector: network.
Weaknesses#
- CWE-862 Missing Authorization
References#
Exploit#
History#
- Version 1Record published in the CVE List.