Yüksek CVSS 8.2
CVE-2025-15485: CVE-2025-15485: eksik yetkilendirme
Açıklama (NVD)
The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc
Özet bilgiler
- CVSS v3.1
- 8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N - EPSS
- %0,35 (yüzdelik 28)
- CWE
- CWE-862
- Yama
- Yok / bilinmiyor