Vulnerability · Published Sep 2, 2026 · Assigned by WPScan
CVE-2025-15485Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call
High 8.2
In plain English
A high-severity missing authorization in Auto x LINE from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.3%top 71.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Auto x LINE | 0 – through 1.0.0 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
References
- https://wpscan.com/vulnerability/3e9da619-bce1-49b5-aa35-dce22b72f9e6/ exploit, vdb-entry, technical-description