2025 CVE Vulnerabilities
45,296 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-32629 | HIGH | 8.6 | 0.6% | Apr 11, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CMSJunkie - WordPress Bu... |
| CVE-2025-32627 | HIGH | 8.1 | 0.8% | Apr 11, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-32618 | HIGH | 8.5 | 0.4% | Apr 11, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins Wishli... |
| CVE-2025-32614 | HIGH | 8.8 | 1.7% | Apr 11, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-32607 | CRITICAL | 9.8 | 0.7% | Apr 11, 2025 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpBookingly service-booking-manager allows Object Inje... |
| CVE-2025-32603 | CRITICAL | 9.3 | 0.4% | Apr 11, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK WP Online Users... |
| CVE-2025-32601 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in twispay Twispay Cr... |
| CVE-2025-32600 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tournamatch Tourna... |
| CVE-2025-32599 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in miunosoft Task Sch... |
| CVE-2025-32598 | MEDIUM | 6.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Table Builder W... |
| CVE-2025-32589 | HIGH | 8.1 | 0.8% | Apr 11, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-32587 | HIGH | 8.1 | 0.8% | Apr 11, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in pickupp WooCommerce Pick... |
| CVE-2025-32586 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ABA Bank ABA PayWa... |
| CVE-2025-32585 | HIGH | 7.5 | 0.7% | Apr 11, 2025 | Path Traversal: '.../...//' vulnerability in Trusty Plugins Shop Products Filter trusty-woo-products-filter allows PHP L... |
| CVE-2025-32579 | CRITICAL | 9.9 | 0.6% | Apr 11, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in SoftClever Limited Sync Posts sync-posts allows Upload ... |
| CVE-2025-32577 | CRITICAL | 9.8 | 0.7% | Apr 11, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-32569 | CRITICAL | 9.8 | 0.7% | Apr 11, 2025 | Deserialization of Untrusted Data vulnerability in RealMag777 TableOn posts-table-filterable allows Object Injection.Thi... |
| CVE-2025-32568 | CRITICAL | 9.8 | 0.7% | Apr 11, 2025 | Deserialization of Untrusted Data vulnerability in empik EmpikPlace for Woocommerce empik-for-woocommerce allows Object ... |
| CVE-2025-32567 | HIGH | 8.5 | 0.4% | Apr 11, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in dev02ali Easy Post... |
| CVE-2025-32565 | CRITICAL | 9.3 | 0.4% | Apr 11, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vertim Neon Produc... |
| CVE-2025-32558 | HIGH | 8.5 | 0.4% | Apr 11, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ketanajani Duplica... |
| CVE-2025-32553 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magnigenie RestroP... |
| CVE-2025-32551 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jaap Jansma Connec... |
| CVE-2025-32542 | HIGH | 8.8 | 0.5% | Apr 11, 2025 | Missing Authorization vulnerability in EazyPlugins Eazy Plugin Manager plugins-on-steroids allows Exploiting Incorrectly... |
| CVE-2025-32541 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in infosoftplugin Woo... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now