2025 CVE Vulnerabilities
45,255 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-49876 | HIGH | 8.5 | 0.3% | Jul 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileG... |
| CVE-2025-49319 | MEDIUM | 6.5 | 0.3% | Jul 16, 2025 | Missing Authorization vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce allows Exploiting In... |
| CVE-2025-49034 | HIGH | 7.6 | 0.3% | Jul 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel Builde... |
| CVE-2025-49031 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefan M. SMu Manu... |
| CVE-2025-48345 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arisoft Contact Fo... |
| CVE-2025-48339 | MEDIUM | 6.5 | 0.2% | Jul 16, 2025 | Missing Authorization vulnerability in activity-log.com Profiler - What Slowing Down Your WP allows Exploiting Incorrect... |
| CVE-2025-48300 | CRITICAL | 9.1 | 0.4% | Jul 16, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in Adrian Tobey Groundhogg groundhogg allows Upload a Web ... |
| CVE-2025-48291 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker /... |
| CVE-2025-47652 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infility Infility ... |
| CVE-2025-47645 | HIGH | 8.5 | 0.3% | Jul 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX ... |
| CVE-2025-47554 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs CSS3 ... |
| CVE-2025-46500 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ValvePress Wordpre... |
| CVE-2025-32574 | HIGH | 8.5 | 0.3% | Jul 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPGYM all... |
| CVE-2025-31427 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Invic... |
| CVE-2025-31422 | HIGH | 8.8 | 0.4% | Jul 16, 2025 | Deserialization of Untrusted Data vulnerability in designthemes Visual Art | Gallery WordPress Theme visual-arts allows ... |
| CVE-2025-31072 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Ofiz ... |
| CVE-2025-31070 | HIGH | 7.5 | 0.5% | Jul 16, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup HTML5 Radio... |
| CVE-2025-31055 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vergatheme Electri... |
| CVE-2025-30973 | CRITICAL | 9.8 | 0.5% | Jul 16, 2025 | Deserialization of Untrusted Data vulnerability in Codexpert, Inc CoSchool LMS coschool allows Object Injection.This iss... |
| CVE-2025-30959 | MEDIUM | 6.5 | 0.3% | Jul 16, 2025 | Missing Authorization vulnerability in WPFactory Product XML Feed Manager for WooCommerce product-xml-feeds-for-woocomme... |
| CVE-2025-30955 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GT3themes ListingE... |
| CVE-2025-30949 | CRITICAL | 9.8 | 0.5% | Jul 16, 2025 | Deserialization of Untrusted Data vulnerability in Guru Team Site Chat on Telegram site-chat-on-telegram allows Object I... |
| CVE-2025-30936 | CRITICAL | 9.3 | 0.4% | Jul 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Torod Company for ... |
| CVE-2025-29009 | CRITICAL | 10 | 0.5% | Jul 16, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in Webkul Medical Prescription Attachment Plugin for WooCo... |
| CVE-2025-29000 | HIGH | 7.5 | 0.4% | Jul 16, 2025 | Missing Authorization vulnerability in August Infotech Multi-language Responsive Contact Form responsive-contact-form al... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now