2025 CVE Vulnerabilities
45,295 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-46242 | MEDIUM | 4.9 | 0.3% | Apr 22, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz watu... |
| CVE-2025-46241 | HIGH | 8.8 | 0.2% | Apr 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar ... |
| CVE-2025-46240 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Simple ... |
| CVE-2025-46239 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Theme S... |
| CVE-2025-46238 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rbaer List Last Ch... |
| CVE-2025-46237 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre L... |
| CVE-2025-46236 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Software LLC ... |
| CVE-2025-46235 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT B... |
| CVE-2025-46233 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image... |
| CVE-2025-46232 | HIGH | 8.8 | 0.2% | Apr 22, 2025 | Missing Authorization vulnerability in alttextai Download Alt Text AI alttext-ai allows Exploiting Incorrectly Configure... |
| CVE-2025-46231 | HIGH | 8.8 | 0.1% | Apr 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter... |
| CVE-2025-46229 | MEDIUM | 4.8 | 0.2% | Apr 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Israpil Textmetric... |
| CVE-2025-46228 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event p... |
| CVE-2025-46227 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brecht Custom Rela... |
| CVE-2025-46226 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ferranfg MPL-Publi... |
| CVE-2025-46225 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Post in pa... |
| CVE-2025-3519 | HIGH | 7 | 0.2% | Apr 22, 2025 | An authorization bypass in Unblu Spark allows a participant of a conversation to replace an existing, uploaded file. Ev... |
| CVE-2025-3518 | MEDIUM | 4.3 | 0.2% | Apr 22, 2025 | It technically possible for a user to upload a file to a conversation despite the file upload functionality being disabl... |
| CVE-2025-26413 | HIGH | 7.5 | 0.6% | Apr 22, 2025 | Improper Input Validation vulnerability in Apache Kvrocks. The SETRANGE command didn't check if the `offset` input is a... |
| CVE-2025-3814 | MEDIUM | 6.4 | 0.3% | Apr 22, 2025 | The Tax Switch for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class-name’ pa... |
| CVE-2025-2839 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | The WP Import Export Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpiePreviewData’ fu... |
| CVE-2025-2594 | HIGH | 8.1 | 7.2% | Apr 22, 2025 | The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when ... |
| CVE-2025-3616 | HIGH | 8.8 | 2.0% | Apr 22, 2025 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to m... |
| CVE-2025-2300 | MEDIUM | 5.5 | 0.1% | Apr 22, 2025 | Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability. This is... |
| CVE-2025-3577 | MEDIUM | 4.9 | 9.0% | Apr 22, 2025 | **UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B f... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now