2025 CVE Vulnerabilities
45,295 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-31324 | CRITICAL | 9.8 | 99.5% | Apr 24, 2025 | SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated a... |
| CVE-2025-46542 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeXpert Xpert T... |
| CVE-2025-46541 | MEDIUM | 5.9 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elrata_ WP-reCAPTC... |
| CVE-2025-46540 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Mok GNA Sear... |
| CVE-2025-46538 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webplanetsoft Inli... |
| CVE-2025-46536 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RichardHarrison Ca... |
| CVE-2025-46534 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DanielRiera Image ... |
| CVE-2025-46533 | MEDIUM | 5.9 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdrift.no Landing... |
| CVE-2025-46532 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Haris Zulfiqar Too... |
| CVE-2025-46531 | MEDIUM | 4.9 | 0.2% | Apr 24, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Ankur Vishwakarma WP AVCL Automation Helper (formerly WPFlyLeads) wo... |
| CVE-2025-46530 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in HuangYe WuDeng Hacklog Remote Attachment hacklog-remote-attachment al... |
| CVE-2025-46529 | MEDIUM | 5.9 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StressFree Sites B... |
| CVE-2025-46528 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Steve Availability Calendar availability allows Stored XSS.This issue... |
| CVE-2025-46525 | MEDIUM | 5.9 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in msmitley WP Cookie... |
| CVE-2025-46524 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in stesvis WP Filter Post Category wp-filter-post-categories allows Stor... |
| CVE-2025-46523 | MEDIUM | 5.9 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devignstudiosltd C... |
| CVE-2025-46522 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Billy Bryant Tabs gt-tabs allows Stored XSS.This issue affects Tabs: ... |
| CVE-2025-46521 | MEDIUM | 5.9 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Silver Muru WS For... |
| CVE-2025-46520 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in alphasis Related Posts via Taxonomies related-posts-via-taxonomies al... |
| CVE-2025-46519 | MEDIUM | 4.3 | 0.2% | Apr 24, 2025 | Missing Authorization vulnerability in M.Code Media Library Downloader media-library-downloader allows Exploiting Incorr... |
| CVE-2025-46517 | MEDIUM | 5.9 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdiscover Blog Ma... |
| CVE-2025-46516 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in silencecm Twitter Card Generator twitter-card-generator allows Stored... |
| CVE-2025-46514 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in milat Milat jQuery Automatic Popup milat-jquery-automatic-popup allow... |
| CVE-2025-46513 | MEDIUM | 4.3 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Codebangers All in One Time Clock Lite aio-time-clock-lite allows Cro... |
| CVE-2025-46512 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Shamim Hasan Custom Functions Plugin custom-functions allows Stored X... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now