[CVE-2025-15485] The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its RES…

Descripción técnica

The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc

Puntuación CVSS

Score: 8.2/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Debilidades (CWE)

CWE-862

Fuente oficial

Publicado en NIST NVD.