๐Ÿ” CVE Alert

CVE-2025-15485

HIGH 8.2

Auto x LINE <= 1.0.0 โ€“ Unauthenticated REST API Endpoints Call

CVSS Score
8.2
EPSS Score
0.0%
EPSS Percentile
0th

The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc

Vendor unknown
Product auto x line
Published Sep 2, 2026
Last Updated Sep 2, 2026
Stay Ahead of the Next One

Get instant alerts for unknown auto x line

Be the first to know when new high vulnerabilities affecting unknown auto x line are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

Unknown / Auto x LINE
0 โ‰ค 1.0.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
wpscan.com: https://wpscan.com/vulnerability/3e9da619-bce1-49b5-aa35-dce22b72f9e6/

Credits

Khaled Alenazi (Nxploited) WPScan