2025 CVE Vulnerabilities

45,255 CVEs published in 2025.

CVE IDSeverityCVSSDescription
CVE-2025-2799MEDIUM4.8The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable ...
CVE-2025-6977MEDIUM6.1The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Reflected Cross-Site Scrip...
CVE-2025-53842MEDIUM6.8Use of hard-coded credentials issue exists in ZWX-2000CSW2-HN prior to 0.3.19 and ZWX-2000CS2-HN firmware all versions. ...
CVE-2025-53958Rejected reason: Not used
CVE-2025-53957Rejected reason: Not used
CVE-2025-53956Rejected reason: Not used
CVE-2025-53955Rejected reason: Not used
CVE-2025-53954Rejected reason: Not used
CVE-2025-53953Rejected reason: Not used
CVE-2025-53952Rejected reason: Not used
CVE-2025-6981MEDIUM4.3An incorrect authorization vulnerability allowed unauthorized read access to the contents of internal repositories for c...
CVE-2025-53906MEDIUM4.1Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plug...
CVE-2025-53905MEDIUM4.1Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plug...
CVE-2025-49841CRITICAL9.8GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe de...
CVE-2025-49840CRITICAL9.8GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe de...
CVE-2025-49839CRITICAL9.8GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe de...
CVE-2025-49838CRITICAL9.8GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe de...
CVE-2025-49837CRITICAL9.8GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe de...
CVE-2025-49836CRITICAL9.8GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command in...
CVE-2025-49835CRITICAL9.8GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command in...
CVE-2025-49834CRITICAL9.8GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command in...
CVE-2025-49833CRITICAL9.8GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command in...
CVE-2025-49831CRITICAL9.8An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misco...
CVE-2025-30761MEDIUM5.9Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting)....
CVE-2025-53032MEDIUM4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now