2025 CVE Vulnerabilities
45,268 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-47608 | CRITICAL | 9.3 | 0.7% | Jun 9, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sonalsinha21 Recov... |
| CVE-2025-47598 | MEDIUM | 6.5 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in click5 History Log... |
| CVE-2025-47561 | HIGH | 8.8 | 0.3% | Jun 9, 2025 | Incorrect Privilege Assignment vulnerability in RomanCode MapSVG mapsvg allows Privilege Escalation.This issue affects M... |
| CVE-2025-47527 | HIGH | 7.1 | 0.3% | Jun 9, 2025 | Missing Authorization vulnerability in Icegram Icegram Collect icegram-rainmaker allows Exploiting Incorrectly Configure... |
| CVE-2025-47511 | MEDIUM | 6.5 | 0.5% | Jun 9, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-C... |
| CVE-2025-47487 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moreconvert Team M... |
| CVE-2025-47477 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in revmakx Backup and... |
| CVE-2025-47463 | HIGH | 7.1 | 0.3% | Jun 9, 2025 | Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce all... |
| CVE-2025-46178 | MEDIUM | 6.1 | 0.3% | Jun 9, 2025 | Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project.... |
| CVE-2025-45055 | MEDIUM | 5.4 | 0.3% | Jun 9, 2025 | Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module. An authentic... |
| CVE-2025-39539 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brewlabs WP Email ... |
| CVE-2025-39476 | HIGH | 7.5 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-39475 | HIGH | 8.1 | 0.4% | Jun 9, 2025 | Path Traversal: '.../...//' vulnerability in Frenify Arlo arlo allows PHP Local File Inclusion.This issue affects Arlo: ... |
| CVE-2025-39473 | HIGH | 8.1 | 0.4% | Jun 9, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebGeniusLab Seofy Core ... |
| CVE-2025-32595 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-32308 | HIGH | 7.6 | 0.3% | Jun 9, 2025 | Missing Authorization vulnerability in looks_awesome Team Builder a-team-showcase allows Exploiting Incorrectly Configur... |
| CVE-2025-32305 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sneeit WordPress F... |
| CVE-2025-32291 | CRITICAL | 10 | 0.4% | Jun 9, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Using ... |
| CVE-2025-31925 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT... |
| CVE-2025-31920 | HIGH | 8.5 | 0.3% | Jun 9, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech WP Gupp... |
| CVE-2025-31917 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Unive... |
| CVE-2025-31638 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeton Spare all... |
| CVE-2025-31635 | HIGH | 7.5 | 0.5% | Jun 9, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup CLEVER lbg-... |
| CVE-2025-31429 | CRITICAL | 9.8 | 0.5% | Jun 9, 2025 | Deserialization of Untrusted Data vulnerability in themeton PressGrid - Frontend Publish Reaction & Multimedia Theme all... |
| CVE-2025-31426 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Stick... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now