2025 CVE Vulnerabilities
45,296 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-39600 | MEDIUM | 4.3 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for WooCommerce and QuickBooks wp-woocommerce-q... |
| CVE-2025-39599 | MEDIUM | 4.7 | 0.3% | Apr 16, 2025 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Webilia Inc. Listdom listdom allows Phishing.This i... |
| CVE-2025-39598 | MEDIUM | 4.9 | 0.6% | Apr 16, 2025 | Path Traversal: '.../...//' vulnerability in Quý Lê 91 Administrator Z administrator-z allows Path Traversal.This issue ... |
| CVE-2025-39597 | MEDIUM | 4.7 | 0.3% | Apr 16, 2025 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Arthur Yarwood Fast eBay Listings fast-ebay-listing... |
| CVE-2025-39593 | MEDIUM | 4.3 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in EverAccounting Ever Accounting wp-ever-accounting allows Cross Site R... |
| CVE-2025-39592 | HIGH | 7.5 | 0.7% | Apr 16, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-39591 | MEDIUM | 5.4 | 0.3% | Apr 16, 2025 | Missing Authorization vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows Exploiting Incorrec... |
| CVE-2025-39590 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essent... |
| CVE-2025-39589 | MEDIUM | 4.3 | 0.3% | Apr 16, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper Essential Addons... |
| CVE-2025-39585 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Travelfic... |
| CVE-2025-39584 | HIGH | 7.5 | 0.7% | Apr 16, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-39582 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Passionate Program... |
| CVE-2025-39581 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify ... |
| CVE-2025-39579 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Membersh... |
| CVE-2025-39578 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberChimps Respon... |
| CVE-2025-39577 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive Prop... |
| CVE-2025-39576 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPA... |
| CVE-2025-39575 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPSight WPCasa wpc... |
| CVE-2025-39574 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UIUX Lab Uix Short... |
| CVE-2025-39573 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in teastudio.pl WP Po... |
| CVE-2025-39572 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Checkout... |
| CVE-2025-39571 | MEDIUM | 4.3 | 0.3% | Apr 16, 2025 | Missing Authorization vulnerability in WPXPO WowStore product-blocks allows Exploiting Incorrectly Configured Access Con... |
| CVE-2025-39570 | HIGH | 8.8 | 0.6% | Apr 16, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-39566 | HIGH | 7.6 | 0.5% | Apr 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Hostel hostel ... |
| CVE-2025-39565 | HIGH | 7.2 | 0.7% | Apr 16, 2025 | Deserialization of Untrusted Data vulnerability in Melapress MelaPress Login Security melapress-login-security allows Ob... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now