VULNERABILITY INTELLIGENCE
CVE-2025-15485
CVSS score8.2 HIGH
EPSS probability0.35%
CISA KEVNot currently listed
Published2026-09-02
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Description
The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-862