A critical authorization bypass vulnerability in the Auto x LINE WordPress plugin allows unauthenticated attackers to modify sensitive plugin configurations.

This flaw is classified as a missing authorization vulnerability (CWE-862) occurring within the plugin REST API. Because the endpoints fail to validate user permissions, any unauthenticated remote attacker can invoke these functions to alter plugin settings or purge logs.

The vulnerability carries a CVSS score of 8.2, which reflects the high potential for unauthorized configuration changes. Successful exploitation could lead to the exposure of plugin functionality, potential log tampering to hide malicious activity, or the misconfiguration of the site to facilitate further attacks, resulting in significant security degradation.

Immediate Action: As no patch is currently identified, verify if the plugin is necessary for business operations and deactivate or remove it immediately if it is not.

Proactive Monitoring: Review web server logs for suspicious REST API requests directed at the plugin endpoints, specifically looking for unauthorized POST or DELETE operations.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block unauthorized access to the plugin REST API endpoints until an official security update is released by the vendor.

Public Exploit Available: No — there is no confirmed public exploit available in the provided data.

Given the ease with which unauthenticated attackers can manipulate plugin settings, organizations should prioritize the immediate removal or deactivation of the Auto x LINE plugin. If the plugin is mission-critical, implement strict WAF filtering and monitor the environment closely until a vendor-supplied patch is made available.