Description
The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Auto x LINE | ≤ 1.0.0 | — |
References
- https://wpscan.com/vulnerability/3e9da619-bce1-49b5-aa35-dce22b72f9e6/ exploit vdb-entry technical-description