CVE-2025-15485 — Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call

CVE-2025-15485

Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call PUBLISHED

Description (CNA)

The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc

Affected (CNA)

Vendor / product	Versions
Unknown / Auto x LINE	affected 0 through 1.0.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/3e9da619-bce1-49b5-aa35-dce22b72f9e6/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.