2025 CVE Vulnerabilities
45,295 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-46511 | MEDIUM | 6.4 | 0.2% | Apr 24, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Derek Springer BeerXML Shortcode beerxml-shortcode allows Server Sid... |
| CVE-2025-46510 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in harrysudana Contact Form 7 Calendar cf7-calendar allows Stored XSS.Th... |
| CVE-2025-46509 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrey Mikhalchuk ... |
| CVE-2025-46508 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in kasonzhao Advanced lazy load advanced-lazy-load allows Stored XSS.Thi... |
| CVE-2025-46507 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in ldrumm Unsafe Mimetypes unsafe-mimetypes allows Stored XSS.This issue... |
| CVE-2025-46506 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Lora77 WpZon – Amazon Affiliate Plugin wpzon allows Reflected XSS.Thi... |
| CVE-2025-46505 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in farinspace Peekabo... |
| CVE-2025-46504 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Olar Marius Vasaio QR Code vasaio-qr-code allows Stored XSS.This issu... |
| CVE-2025-46503 | MEDIUM | 4.9 | 0.2% | Apr 24, 2025 | Server-Side Request Forgery (SSRF) vulnerability in josheli Simple Google Photos Grid simple-google-photos-grid allows S... |
| CVE-2025-46502 | HIGH | 7.1 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bas Matthee LSD Cu... |
| CVE-2025-46501 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in biancardi Mixcloud... |
| CVE-2025-46499 | HIGH | 7.1 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hccoder PayPal Exp... |
| CVE-2025-46498 | MEDIUM | 5.4 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in nghialuu Zalo Official Live Chat zalo-official-live-chat allows Cross... |
| CVE-2025-46497 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Navegg Navegg Analytics navegg allows Stored XSS.This issue affects N... |
| CVE-2025-46496 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in oniswap Mini twitt... |
| CVE-2025-46495 | MEDIUM | 6.5 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in tomontoast Drop Caps drop-caps allows Stored XSS.This issue affects D... |
| CVE-2025-46492 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Pham Thanh Call Now PHT Blog call-now-coccoc-pht-blog allows Stored X... |
| CVE-2025-46491 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matthew Muro Multi... |
| CVE-2025-46489 | MEDIUM | 5.3 | 0.3% | Apr 24, 2025 | Missing Authorization vulnerability in vinodvaswani9 Bulk Assign Linked Products For WooCommerce wc-bulk-assign-linked-p... |
| CVE-2025-46485 | MEDIUM | 5.3 | 0.3% | Apr 24, 2025 | Missing Authorization vulnerability in Carlo La Pera WP Customize Login Page wp-customize-login-page allows Accessing Fu... |
| CVE-2025-46484 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nasir179125 Image ... |
| CVE-2025-46483 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Moss Peadig’s... |
| CVE-2025-46481 | HIGH | 7.2 | 0.5% | Apr 24, 2025 | Deserialization of Untrusted Data vulnerability in Michael Cannon Flickr Shortcode Importer flickr-shortcode-importer al... |
| CVE-2025-46480 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Padam Shankhadev N... |
| CVE-2025-46479 | MEDIUM | 6.5 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevynCJohnson BBCo... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now