2025 CVE Vulnerabilities
45,296 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-39564 | MEDIUM | 6.5 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in WP Trio Conditional Shipping for WooCommerce conditional-shipping-for... |
| CVE-2025-39563 | MEDIUM | 6.5 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in WP Trio Conditional Payments for WooCommerce conditional-payments-for... |
| CVE-2025-39560 | MEDIUM | 5.4 | 0.4% | Apr 16, 2025 | Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Con... |
| CVE-2025-39557 | CRITICAL | 9.1 | 0.5% | Apr 16, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in StellarWP Kadence WooCommerce Email Designer kadence-wo... |
| CVE-2025-39556 | MEDIUM | 5.3 | 0.4% | Apr 16, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in mediavine Mediavine Control ... |
| CVE-2025-39555 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church ... |
| CVE-2025-39552 | MEDIUM | 5.4 | 0.3% | Apr 16, 2025 | Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incor... |
| CVE-2025-39549 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in whiletrue Most And... |
| CVE-2025-39548 | HIGH | 7.1 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Right Click Disable OR Ban right-click-disable-or-ban allow... |
| CVE-2025-39547 | HIGH | 7.1 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Sto... |
| CVE-2025-39546 | MEDIUM | 4.3 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite all... |
| CVE-2025-39545 | MEDIUM | 5.4 | 0.4% | Apr 16, 2025 | Missing Authorization vulnerability in miniOrange WordPress REST API Authentication wp-rest-api-authentication allows Ex... |
| CVE-2025-39544 | HIGH | 7.4 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in sminozzi WP Tools wptools allows Path Traversal.This issue affects WP... |
| CVE-2025-39543 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Ele... |
| CVE-2025-39540 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rhys Wynne WP Flip... |
| CVE-2025-39538 | MEDIUM | 6.6 | 0.4% | Apr 16, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in Mathieu Chartier WP-Advanced-Search wp-advanced-search ... |
| CVE-2025-39531 | MEDIUM | 5.3 | 0.5% | Apr 16, 2025 | Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing... |
| CVE-2025-39530 | HIGH | 7.1 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in dsky Site Search 360 site-search-360 allows Stored XSS.This issue aff... |
| CVE-2025-39529 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robin Cornett Scri... |
| CVE-2025-39528 | MEDIUM | 5.4 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rescue Themes Resc... |
| CVE-2025-39525 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Logo Carouse... |
| CVE-2025-39524 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in bPlugins Html5 Audio Play... |
| CVE-2025-39522 | MEDIUM | 5.4 | 0.4% | Apr 16, 2025 | Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Config... |
| CVE-2025-39520 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout F... |
| CVE-2025-39518 | HIGH | 7.6 | 0.5% | Apr 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedefiningTheWeb B... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now