2025 CVE Vulnerabilities

45,138 CVEs published in 2025.

CVE IDSeverityCVSSDescription
CVE-2025-69167HIGH8.1Unauthenticated Local File Inclusion in Eros <= 1.3 versions.
CVE-2025-69165HIGH8.1Unauthenticated Local File Inclusion in Choreo <= 1.6 versions.
CVE-2025-69163HIGH8.1Unauthenticated Local File Inclusion in WineShop <= 3.17 versions.
CVE-2025-69162HIGH8.1Unauthenticated Local File Inclusion in Grecko <= 5.17 versions.
CVE-2025-69161HIGH8.1Unauthenticated Local File Inclusion in Snowy <= 1.13 versions.
CVE-2025-69160HIGH8.1Unauthenticated Local File Inclusion in Gita <= 1.11 versions.
CVE-2025-69159HIGH8.1Unauthenticated Local File Inclusion in Printo <= 1.11 versions.
CVE-2025-69151HIGH7.1Unauthenticated Cross Site Scripting (XSS) in Grand Car Rental <= 3.7 versions.
CVE-2025-69150HIGH8.1Unauthenticated Local File Inclusion in Medeus <= 1.14 versions.
CVE-2025-69149HIGH8.1Unauthenticated Local File Inclusion in Top Dog <= 1.0.5 versions.
CVE-2025-69148HIGH8.1Unauthenticated Local File Inclusion in Quirky <= 1.23 versions.
CVE-2025-69147HIGH8.1Unauthenticated Local File Inclusion in Putter <= 1.17 versions.
CVE-2025-69146HIGH8.1Unauthenticated Local File Inclusion in Dom <= 1.24 versions.
CVE-2025-69145HIGH8.1Unauthenticated Local File Inclusion in Gat <= 1.16 versions.
CVE-2025-69143HIGH8.1Unauthenticated Local File Inclusion in Mission <= 1.22 versions.
CVE-2025-69142HIGH8.1Unauthenticated Local File Inclusion in Abelle <= 1.22 versions.
CVE-2025-69141HIGH8.1Unauthenticated Local File Inclusion in Kelly Young <= 1.1.0 versions.
CVE-2025-69139HIGH8.6Unauthenticated Arbitrary File Deletion in Car Zone <= 3.7 versions.
CVE-2025-69138HIGH8.8Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.
CVE-2025-69137MEDIUM6.5Subscriber Broken Access Control in Genemy <= 1.6.6 versions.
CVE-2025-69136HIGH8.1Unauthenticated Local File Inclusion in Wanium <= 1.9.8 versions.
CVE-2025-69135HIGH8.5Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin <= 2.7.2 versions.
CVE-2025-69131HIGH7.5Unauthenticated Arbitrary File Download in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 ve...
CVE-2025-69129CRITICAL10Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 vers...
CVE-2025-69125HIGH8.1Unauthenticated Local File Inclusion in Food Drop <= 1.3 versions.

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now