2025 CVE Vulnerabilities
45,266 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-53091 | CRITICAL | 9.8 | 0.5% | Jun 27, 2025 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Time-Based Bl... |
| CVE-2025-52553 | CRITICAL | 9.6 | 0.4% | Jun 27, 2025 | authentik is an open-source identity provider. After authorizing access to a RAC endpoint, authentik creates a token whi... |
| CVE-2025-6768 | MEDIUM | 6.3 | 0.2% | Jun 27, 2025 | A vulnerability classified as critical has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef38... |
| CVE-2025-53339 | HIGH | 7.5 | 0.4% | Jun 27, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-53338 | HIGH | 7.1 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in dor re.place replace allows Stored XSS.This issue affects re.place: f... |
| CVE-2025-53336 | MEDIUM | 6.5 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in abditsori My Resum... |
| CVE-2025-53332 | HIGH | 7.1 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in ethoseo Track Everything track-everything allows Stored XSS.This issu... |
| CVE-2025-53331 | HIGH | 7.1 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in samcharrington RSS Digest rss-digest allows Stored XSS.This issue aff... |
| CVE-2025-53329 | HIGH | 7.1 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in szajenw Społecznościowa 6 PL 2013 spolecznosciowa-6-pl-2013 allows St... |
| CVE-2025-53327 | MEDIUM | 4.3 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in rui_mashita Aioseo Multibyte Descriptions aioseo-multibyte-descriptio... |
| CVE-2025-53325 | MEDIUM | 5.9 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dilip kumar Beauty... |
| CVE-2025-53323 | MEDIUM | 4.3 | 0.2% | Jun 27, 2025 | Missing Authorization vulnerability in danbriapps Pre-Publish Post Checklist pre-publish-post-checklist allows Exploitin... |
| CVE-2025-53322 | MEDIUM | 5.3 | 0.2% | Jun 27, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Authorize.NET Payments Using Contac... |
| CVE-2025-53321 | MEDIUM | 6.5 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Raise The Money Ra... |
| CVE-2025-53320 | MEDIUM | 6.5 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wp Enhanced Free D... |
| CVE-2025-53318 | MEDIUM | 5.4 | 0.2% | Jun 27, 2025 | Missing Authorization vulnerability in WPManiax WP DB Booster wp-db-booster allows Exploiting Incorrectly Configured Acc... |
| CVE-2025-53317 | HIGH | 7.1 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in AcmeeDesign WPShapere - WordPress admin theme wpshapere-lite allows S... |
| CVE-2025-53315 | HIGH | 7.1 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in alanft Relocate Upload relocate-upload allows Stored XSS.This issue a... |
| CVE-2025-53314 | CRITICAL | 9.6 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in sh1zen WP Optimizer wp-optimizer allows SQL Injection.This issue affe... |
| CVE-2025-53313 | HIGH | 7.1 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in plumwd Twitch TV Embed Suite twitch-tv-embed-suite allows Stored XSS.... |
| CVE-2025-53312 | HIGH | 7.1 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Looks Awesome OnionBuzz onionbuzz-viral-quiz allows Stored XSS.This i... |
| CVE-2025-53311 | HIGH | 7.1 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Amol Nirmala Waman Navayan Subscribe navayan-subscribe allows Stored ... |
| CVE-2025-53310 | HIGH | 7.1 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Funnnny HidePost hidepost allows Reflected XSS.This issue affects Hid... |
| CVE-2025-53309 | MEDIUM | 5.3 | 0.2% | Jun 27, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Stripe Payments Using Contact Form ... |
| CVE-2025-53308 | HIGH | 7.1 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in gopi_plus Image Slider With Description image-slider-with-description... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now