2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-15714 | LOW | 3.5 | 0.2% | Nov 11, 2026 | The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its Button module settings before... |
| CVE-2025-15713 | LOW | 3.5 | 0.2% | Nov 11, 2026 | The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its page-builder module settings ... |
| CVE-2025-15712 | LOW | 3.5 | 0.2% | Nov 11, 2026 | The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its staff member settings before ... |
| CVE-2025-15711 | LOW | 3.5 | 0.2% | Nov 11, 2026 | The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its module settings before output... |
| CVE-2025-0166 | LOW | 2.7 | 0.2% | Nov 8, 2026 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could disclose sen... |
| CVE-2025-15708 | LOW | 3.5 | 0.2% | Nov 7, 2026 | The Live Composer WordPress plugin before 2.1.23 does not sanitise and escape some of its custom post type slug setting... |
| CVE-2025-15701 | LOW | 3.5 | 0.1% | Nov 5, 2026 | The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise and escape some of its settings before outputting ... |
| CVE-2025-71450 | LOW | 3.3 | 0.1% | Nov 2, 2026 | inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream() in ini.c that allows attackers to read... |
| CVE-2025-15705 | LOW | 3.5 | 0.2% | Oct 25, 2026 | The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form name, allowing users wi... |
| CVE-2025-29897 | LOW | 2.3 | 0.3% | Oct 15, 2026 | A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attack... |
| CVE-2025-29896 | LOW | 2.3 | 0.3% | Oct 15, 2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac... |
| CVE-2025-29895 | LOW | 2.3 | 0.3% | Oct 15, 2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac... |
| CVE-2025-15703 | LOW | 3.5 | 0.1% | Oct 12, 2026 | The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it... |
| CVE-2025-71424 | LOW | 3.5 | 0.2% | Sep 27, 2026 | Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and includi... |
| CVE-2025-15698 | LOW | 3.5 | 0.1% | Sep 19, 2026 | The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could ... |
| CVE-2025-13166 | LOW | 3.7 | 0.2% | Sep 15, 2026 | The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered us... |
| CVE-2025-26790 | LOW | 3.7 | 0.3% | Sep 14, 2026 | Withsecure Atlant with Capricorn engine before 2025-01-20_02 allows a Remote Denial of Service via an out-of-bounds memo... |
| CVE-2025-64031 | LOW | 2.5 | 0.2% | Sep 14, 2026 | libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field... |
| CVE-2025-70820 | LOW | 3.5 | 0.2% | Sep 13, 2026 | Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder. |
| CVE-2025-64059 | LOW | 1.8 | 0.3% | Sep 13, 2026 | Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is ... |
| CVE-2025-45480 | LOW | 3 | 0.2% | Sep 13, 2026 | Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary. |
| CVE-2025-15695 | LOW | 3.5 | 0.1% | Sep 11, 2026 | The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the ... |
| CVE-2025-52657 | LOW | 3.5 | 0.2% | Sep 7, 2026 | HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the... |
| CVE-2025-52652 | LOW | 3.5 | 0.1% | Sep 7, 2026 | HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content,... |
| CVE-2025-52651 | LOW | 3.5 | 0.1% | Sep 7, 2026 | HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause u... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now