2025 CVE Vulnerabilities
45,142 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-63064 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON e... |
| CVE-2025-63063 | MEDIUM | 5.3 | 0.4% | Dec 9, 2025 | Missing Authorization vulnerability in Yandex Metrika Yandex.Metrica wp-yandex-metrika allows Exploiting Incorrectly Con... |
| CVE-2025-63061 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hogash KALLYAS kal... |
| CVE-2025-63060 | MEDIUM | 4.3 | 0.1% | Dec 9, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in hogash KALLYAS kallyas allows Cross Site Request Forgery.This issue a... |
| CVE-2025-63059 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arscode Ninja Popu... |
| CVE-2025-63058 | MEDIUM | 4.3 | 0.3% | Dec 9, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Hiroaki Miyashita Custom Fie... |
| CVE-2025-63057 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roxnor Wp Ultimate... |
| CVE-2025-63056 | MEDIUM | 4.3 | 0.3% | Dec 9, 2025 | Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Inc... |
| CVE-2025-63055 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Maste... |
| CVE-2025-63054 | MEDIUM | 5.3 | 0.3% | Dec 9, 2025 | Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Inc... |
| CVE-2025-63052 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GalleryCreator Sim... |
| CVE-2025-63050 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam REHub Framew... |
| CVE-2025-63049 | MEDIUM | 5.3 | 0.3% | Dec 9, 2025 | Missing Authorization vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows Accessing Functiona... |
| CVE-2025-63048 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio Listi... |
| CVE-2025-63047 | MEDIUM | 5.3 | 0.2% | Dec 9, 2025 | Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Acces... |
| CVE-2025-63046 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio Listi... |
| CVE-2025-63045 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in averta Master Slid... |
| CVE-2025-63044 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elemento... |
| CVE-2025-63042 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS ... |
| CVE-2025-63037 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DFDevelopment Ronn... |
| CVE-2025-63035 | MEDIUM | 6.5 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS w... |
| CVE-2025-63034 | MEDIUM | 5.4 | 0.2% | Dec 9, 2025 | Missing Authorization vulnerability in Steve Truman Page View Count page-views-count allows Exploiting Incorrectly Confi... |
| CVE-2025-63033 | MEDIUM | 5.9 | 0.2% | Dec 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Riyadh Ahmed Make ... |
| CVE-2025-63028 | MEDIUM | 5.3 | 0.2% | Dec 9, 2025 | Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access Cont... |
| CVE-2025-63025 | MEDIUM | 4.3 | 0.2% | Dec 9, 2025 | Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Con... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now