2025 CVE Vulnerabilities
45,268 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-31424 | CRITICAL | 9.3 | 0.4% | Jun 9, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav WP Le... |
| CVE-2025-31398 | CRITICAL | 9.8 | 0.5% | Jun 9, 2025 | Deserialization of Untrusted Data vulnerability in themeton PIMP - Creative MultiPurpose allows Object Injection. This i... |
| CVE-2025-31396 | CRITICAL | 9.8 | 0.5% | Jun 9, 2025 | Deserialization of Untrusted Data vulnerability in themeton FLAP - Business WordPress Theme allows Object Injection. Thi... |
| CVE-2025-31061 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in redqteam Wishlist ... |
| CVE-2025-31059 | CRITICAL | 9.3 | 0.4% | Jun 9, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in woobewoo WBW Produ... |
| CVE-2025-31058 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Revol... |
| CVE-2025-31057 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Unive... |
| CVE-2025-31052 | CRITICAL | 9.8 | 0.5% | Jun 9, 2025 | Deserialization of Untrusted Data vulnerability in themeton The Fashion - Model Agency One Page Beauty Theme nrgfashion ... |
| CVE-2025-31050 | HIGH | 7.5 | 0.5% | Jun 9, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in appthaplugins Apptha Sli... |
| CVE-2025-31045 | HIGH | 7.5 | 0.4% | Jun 9, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in elfsight elfsight Contact Fo... |
| CVE-2025-31039 | CRITICAL | 9.1 | 0.5% | Jun 9, 2025 | Improper Restriction of XML External Entity Reference vulnerability in pixelgrade Category Icon category-icon allows XML... |
| CVE-2025-31022 | CRITICAL | 9.8 | 0.7% | Jun 9, 2025 | Authentication Bypass Using an Alternate Path or Channel vulnerability in PayU India PayU India payu-india allows Authen... |
| CVE-2025-31019 | HIGH | 8.8 | 0.5% | Jun 9, 2025 | Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Password Policy Manager password-po... |
| CVE-2025-28992 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-28945 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-28944 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-28888 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-27362 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-26592 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-24770 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-24768 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-24767 | CRITICAL | 9.3 | 0.4% | Jun 9, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in facturaone TicketB... |
| CVE-2025-23974 | HIGH | 8.1 | 0.3% | Jun 9, 2025 | Incorrect Privilege Assignment vulnerability in ifkooo One-Login one-login allows Privilege Escalation.This issue affect... |
| CVE-2025-5885 | MEDIUM | 4.3 | 0.2% | Jun 9, 2025 | A vulnerability has been found in Konica Minolta bizhub up to 20250202 and classified as problematic. This vulnerability... |
| CVE-2025-5884 | MEDIUM | 5.4 | 0.2% | Jun 9, 2025 | A vulnerability, which was classified as problematic, was found in Konica Minolta bizhub up to 20250202. This affects an... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now