2025 CVE Vulnerabilities
45,266 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-5338 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all... |
| CVE-2025-52934 | — | — | — | Jun 26, 2025 | Rejected reason: Not a vulnerability. |
| CVE-2025-5459 | HIGH | 8.8 | 0.4% | Jun 26, 2025 | A user with specific node group editing permissions and a specially crafted class parameter could be used to execute com... |
| CVE-2025-5846 | MEDIUM | 4.3 | 0.2% | Jun 26, 2025 | An issue has been discovered in GitLab EE affecting all versions from 16.10 before 17.11.5, 18.0 before 18.0.3, and 18.1... |
| CVE-2025-5315 | MEDIUM | 4.3 | 0.2% | Jun 26, 2025 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18... |
| CVE-2025-48497 | MEDIUM | 5.1 | 0.1% | Jun 26, 2025 | Cross-site request forgery vulnerability exists in iroha Board versions v0.10.12 and earlier. If a user accesses a speci... |
| CVE-2025-41404 | MEDIUM | 5.3 | 0.2% | Jun 26, 2025 | Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is e... |
| CVE-2025-3279 | MEDIUM | 6.5 | 0.3% | Jun 26, 2025 | An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 17.11.5, 18.0 before 18.0.3, and 18... |
| CVE-2025-37101 | HIGH | 8.7 | 0.3% | Jun 26, 2025 | A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC). This vulnerability cou... |
| CVE-2025-2938 | HIGH | 8.8 | 0.3% | Jun 26, 2025 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.11.5, 18.0 before 18.0.3, and 18... |
| CVE-2025-1754 | MEDIUM | 5.3 | 0.2% | Jun 26, 2025 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18... |
| CVE-2025-6624 | HIGH | 7.2 | 0.2% | Jun 26, 2025 | Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through ... |
| CVE-2025-6546 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The Drive Folder Embedder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tablecssclass’ para... |
| CVE-2025-6540 | MEDIUM | 6.4 | 0.2% | Jun 26, 2025 | The web-cam plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions u... |
| CVE-2025-6537 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The Namasha By Mdesign plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘playicon_title’ parame... |
| CVE-2025-5932 | MEDIUM | 4.3 | 0.2% | Jun 26, 2025 | The Homerunner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.... |
| CVE-2025-5929 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The The Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘clientId’ parameter in all ... |
| CVE-2025-5813 | MEDIUM | 5.3 | 0.2% | Jun 26, 2025 | The Amazon Products to WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a miss... |
| CVE-2025-5275 | MEDIUM | 4 | 0.2% | Jun 26, 2025 | The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vul... |
| CVE-2025-6538 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The Post Rating and Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter i... |
| CVE-2025-6383 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The WP-PhotoNav plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's photonav shortcode in... |
| CVE-2025-6378 | MEDIUM | 6.4 | 0.2% | Jun 26, 2025 | The Responsive Food and Drink Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's di... |
| CVE-2025-6290 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The Tournament Bracket Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bra... |
| CVE-2025-6258 | MEDIUM | 6.4 | 0.2% | Jun 26, 2025 | The WP SoundSystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpsstm-track short... |
| CVE-2025-5812 | MEDIUM | 4.3 | 0.2% | Jun 26, 2025 | The VG WORT METIS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now