2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-54700 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-54693 | CRITICAL | 9 | 0.3% | Aug 14, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in epiphyt Form Block form-block allows Upload a Web Shell... |
| CVE-2025-54686 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | Deserialization of Untrusted Data vulnerability in scriptsbundle Exertio exertio allows Object Injection.This issue affe... |
| CVE-2025-54678 | CRITICAL | 9.3 | 0.3% | Aug 14, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Eas... |
| CVE-2025-54669 | CRITICAL | 9.3 | 0.3% | Aug 14, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RomanCode MapSVG m... |
| CVE-2025-52720 | CRITICAL | 9.3 | 0.3% | Aug 14, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super S... |
| CVE-2025-49887 | CRITICAL | 9.9 | 0.3% | Aug 14, 2025 | Improper Control of Generation of Code ('Code Injection') vulnerability in WPFactory Product XML Feed Manager for WooCom... |
| CVE-2025-49059 | CRITICAL | 9.3 | 0.3% | Aug 14, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CleverReach® Cleve... |
| CVE-2025-48293 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-28979 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-25174 | CRITICAL | 10 | 0.5% | Aug 14, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-24775 | CRITICAL | 9.9 | 0.4% | Aug 14, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in Made I.T. Forms forms-by-made-it allows Upload a Web Sh... |
| CVE-2025-8955 | CRITICAL | 9.8 | 0.5% | Aug 14, 2025 | A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of ... |
| CVE-2025-8943 | CRITICAL | 9.8 | 70.9% | Aug 14, 2025 | The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Se... |
| CVE-2025-8047 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins... |
| CVE-2025-55346 | CRITICAL | 9.8 | 17.4% | Aug 14, 2025 | User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to... |
| CVE-2025-8954 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | A vulnerability was identified in PHPGurukul Hospital Management System 4.0. This affects an unknown part of the file /a... |
| CVE-2025-8953 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | A vulnerability was determined in SourceCodester COVID 19 Testing Management System 1.0. Affected by this issue is some ... |
| CVE-2025-8952 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | A vulnerability was found in Campcodes Online Flight Booking Management System 1.0. Affected by this vulnerability is an... |
| CVE-2025-8951 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | A vulnerability has been found in PHPGurukul Teachers Record Management System 2.1. Affected is an unknown function of t... |
| CVE-2025-8950 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | A vulnerability was identified in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown pr... |
| CVE-2025-8949 | CRITICAL | 9.8 | 0.9% | Aug 14, 2025 | A vulnerability was identified in D-Link DIR-825 2.10. Affected by this vulnerability is the function get_ping_app_stat ... |
| CVE-2025-8948 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | A vulnerability was determined in projectworlds Visitor Management System 1.0. Affected is an unknown function of the fi... |
| CVE-2025-8947 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | A vulnerability was found in projectworlds Visitor Management System 1.0. This issue affects some unknown processing of ... |
| CVE-2025-8946 | CRITICAL | 9.8 | 0.4% | Aug 14, 2025 | A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0. This vulnerability affects unknown co... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now