2025 CVE Vulnerabilities
45,267 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-49878 | MEDIUM | 6.5 | 0.2% | Jun 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPA... |
| CVE-2025-49877 | MEDIUM | 4.9 | 0.1% | Jun 17, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communit... |
| CVE-2025-49875 | MEDIUM | 6.5 | 0.2% | Jun 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Cont... |
| CVE-2025-49874 | MEDIUM | 4.3 | 0.2% | Jun 17, 2025 | Missing Authorization vulnerability in tychesoftwares Arconix FAQ arconix-faq allows Exploiting Incorrectly Configured A... |
| CVE-2025-49872 | MEDIUM | 5.3 | 0.2% | Jun 17, 2025 | Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Accessing Functionality Not Properly Constrained ... |
| CVE-2025-49871 | MEDIUM | 5.9 | 0.2% | Jun 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noptin Newsletter ... |
| CVE-2025-49868 | MEDIUM | 4.7 | 0.2% | Jun 17, 2025 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Aman FunnelKit Automations wp-marketing-automations... |
| CVE-2025-49865 | MEDIUM | 4.3 | 0.1% | Jun 17, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Helmut Wandl Advanced Settings advanced-settings allows Cross Site Re... |
| CVE-2025-49864 | MEDIUM | 5.3 | 0.2% | Jun 17, 2025 | Missing Authorization vulnerability in AFS Analytics AFS Analytics addfreestats allows Accessing Functionality Not Prope... |
| CVE-2025-49863 | MEDIUM | 6.5 | 0.2% | Jun 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CodeUs Advanced... |
| CVE-2025-49862 | MEDIUM | 5.9 | 0.2% | Jun 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in motov.net Ebook St... |
| CVE-2025-49861 | MEDIUM | 6.5 | 0.2% | Jun 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timur Kamaev Kama ... |
| CVE-2025-49859 | MEDIUM | 6.5 | 0.2% | Jun 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in etruel WP Views Co... |
| CVE-2025-49858 | MEDIUM | 6.5 | 0.2% | Jun 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arc... |
| CVE-2025-49857 | MEDIUM | 4.3 | 0.2% | Jun 17, 2025 | Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2025-49856 | MEDIUM | 4.3 | 0.1% | Jun 17, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Cross Site Requ... |
| CVE-2025-49855 | MEDIUM | 6.5 | 0.2% | Jun 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meks Meks Flexible... |
| CVE-2025-49854 | HIGH | 7.6 | 0.3% | Jun 17, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Anh Tran Slim SEO ... |
| CVE-2025-49508 | HIGH | 8.1 | 0.4% | Jun 17, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-49452 | CRITICAL | 9.3 | 0.3% | Jun 17, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Ladó PostaP... |
| CVE-2025-49451 | HIGH | 7.5 | 0.4% | Jun 17, 2025 | Path Traversal: '.../...//' vulnerability in yannisraft Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid w... |
| CVE-2025-49447 | CRITICAL | 10 | 0.3% | Jun 17, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in Fastw3b LLC FW Food Menu allows Using Malicious Files.... |
| CVE-2025-49444 | CRITICAL | 10 | 0.3% | Jun 17, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in merkulove Reformer for Elementor reformer-elementor all... |
| CVE-2025-49415 | HIGH | 8.6 | 0.4% | Jun 17, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Fastw3b LLC FW Gallery f... |
| CVE-2025-49331 | HIGH | 7.2 | 0.4% | Jun 17, 2025 | Deserialization of Untrusted Data vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now