blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2025-15485

HIGH 8.2 CVSS 3.1
Published
September 2, 2026
Last modified
October 19, 2026
NVD status
Deferred
Reported by
contact@wpscan.com
Weakness
CWE-862
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Description

The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc

Affected products and versions

  • Unknown Auto x LINE — Up to and including 1.0.0

References

  • wpscan.com https://wpscan.com/vulnerability/3e9da619-bce1-49b5-aa35-dce22b72f9e6/
  • nvd.nist.gov Official NVD record