2025 CVE Vulnerabilities
45,279 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-43833 | HIGH | 7.6 | 0.3% | May 19, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amir Helzer Absolu... |
| CVE-2025-39460 | MEDIUM | 5.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in ThimPress Eduma eduma allows Exploiting Incorrectly Configured Access Control Sec... |
| CVE-2025-39454 | MEDIUM | 4.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory.This issue affects Name Directory: fr... |
| CVE-2025-39450 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs... |
| CVE-2025-39448 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem... |
| CVE-2025-39412 | MEDIUM | 4.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in averta Master Slider master-slider.This issue affects Master Slider: from n/a thr... |
| CVE-2025-39398 | MEDIUM | 4.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in Themovation Bellevue bellevuex.This issue affects Bellevue: from n/a through <= 4... |
| CVE-2025-39396 | HIGH | 7.5 | 0.5% | May 19, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-27010 | HIGH | 8.1 | 0.6% | May 19, 2025 | Path Traversal: '.../...//' vulnerability in bslthemes Tastyc tastyc allows PHP Local File Inclusion.This issue affects ... |
| CVE-2025-26997 | HIGH | 7.1 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in validas Wireless B... |
| CVE-2025-26892 | CRITICAL | 9.9 | 0.5% | May 19, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in dkszone Celestial Aura allows Using Malicious Files.Thi... |
| CVE-2025-26872 | CRITICAL | 9.9 | 0.4% | May 19, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in dkszone Eximius allows Using Malicious Files.This issue... |
| CVE-2025-26735 | HIGH | 7.5 | 0.5% | May 19, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-22287 | MEDIUM | 5.4 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-fr... |
| CVE-2025-4945 | LOW | 3.7 | 0.5% | May 19, 2025 | A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software.... |
| CVE-2025-4941 | CRITICAL | 9.8 | 0.5% | May 19, 2025 | A vulnerability, which was classified as critical, was found in PHPGurukul Credit Card Application Management System 1.0... |
| CVE-2025-4940 | HIGH | 7.3 | 0.4% | May 19, 2025 | A vulnerability, which was classified as critical, has been found in 1000 Projects Daily College Class Work Report Book ... |
| CVE-2025-47583 | MEDIUM | 5.4 | 0.1% | May 19, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross... |
| CVE-2025-47576 | HIGH | 8.8 | 0.4% | May 19, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-46543 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CharlyLeetham Enha... |
| CVE-2025-46263 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lloyd Saunders Aut... |
| CVE-2025-46262 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zack Katz Mad Mimi... |
| CVE-2025-39394 | MEDIUM | 5.3 | 0.3% | May 19, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Solid Plugins AnalyticsWP al... |
| CVE-2025-39388 | MEDIUM | 5.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in Solid Plugins AnalyticsWP allows Accessing Functionality Not Properly Constrained... |
| CVE-2025-39376 | MEDIUM | 4.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in QuanticaLabs Car Park Booking System for WordPress car-park-booking-system-for-wo... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now