2025 CVE Vulnerabilities
45,296 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-32539 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Kohlbach Stor... |
| CVE-2025-32538 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dev02ali Easy Post... |
| CVE-2025-32537 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rachel Cherry Lock... |
| CVE-2025-32536 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sandeep Verma HTML... |
| CVE-2025-32534 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Workbox Workbox Vi... |
| CVE-2025-32525 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MapGeo Interactive... |
| CVE-2025-32524 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyWorks MyWorks Wo... |
| CVE-2025-32523 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in payphone WooCommer... |
| CVE-2025-32519 | CRITICAL | 9.8 | 0.7% | Apr 11, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-32517 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SCAND MultiMailer ... |
| CVE-2025-32509 | HIGH | 7.5 | 0.7% | Apr 11, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMinds Simple WP Events... |
| CVE-2025-32491 | CRITICAL | 9.8 | 0.6% | Apr 11, 2025 | Incorrect Privilege Assignment vulnerability in Rankology Rankology SEO – On-site SEO rankology-seo-all-in-one-seo-analy... |
| CVE-2025-32144 | HIGH | 8.8 | 0.8% | Apr 11, 2025 | Deserialization of Untrusted Data vulnerability in PickPlugins Job Board Manager job-board-manager allows Object Injecti... |
| CVE-2025-32143 | HIGH | 8.8 | 0.8% | Apr 11, 2025 | Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue a... |
| CVE-2025-32107 | HIGH | 8 | 2.0% | Apr 11, 2025 | OS command injection vulnerability exists in Deco BE65 Pro firmware versions prior to "Deco BE65 Pro(JP)_V1_1.1.2 Build ... |
| CVE-2025-31599 | CRITICAL | 9.3 | 0.5% | Apr 11, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N-Media Bulk Produ... |
| CVE-2025-31565 | CRITICAL | 9.3 | 0.6% | Apr 11, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lisandro Martinez ... |
| CVE-2025-31379 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in programphases Inse... |
| CVE-2025-31378 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in danbwb Oppso Unit ... |
| CVE-2025-31041 | HIGH | 7.5 | 0.5% | Apr 11, 2025 | Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows E... |
| CVE-2025-31040 | HIGH | 8.1 | 0.9% | Apr 11, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-31028 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Huseyin Berberoglu... |
| CVE-2025-31021 | HIGH | 7.1 | 0.3% | Apr 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dolby_uk Mobile Sm... |
| CVE-2025-31015 | HIGH | 7.5 | 0.7% | Apr 11, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-31014 | HIGH | 7.5 | 0.9% | Apr 11, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now