2025 CVE Vulnerabilities
45,153 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-62120 | MEDIUM | 5.4 | 0.1% | Dec 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Rick Beckman OpenHook thesis-openhook allows Cross Site Request Forge... |
| CVE-2025-62119 | MEDIUM | 5.9 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ViitorCloud Techno... |
| CVE-2025-62117 | MEDIUM | 5.4 | 0.1% | Dec 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Jayce53 EasyIndex easyindex allows Cross Site Request Forgery.This is... |
| CVE-2025-62097 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in seothemes SEO Slid... |
| CVE-2025-62096 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Maximum ... |
| CVE-2025-62095 | MEDIUM | 6.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in neilgee Bootstrap ... |
| CVE-2025-59003 | MEDIUM | 5.8 | 0.2% | Dec 31, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in inkthemescom ColorWay colorway allows Retrieve Embedd... |
| CVE-2025-62990 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in livemesh Livemesh ... |
| CVE-2025-62744 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Steman Page ... |
| CVE-2025-62743 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zookatron MyBookTa... |
| CVE-2025-62742 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Curator.io Curator... |
| CVE-2025-62125 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anshul Gangrade Cu... |
| CVE-2025-62118 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kcseopro AdWords C... |
| CVE-2025-62111 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Extra Sh... |
| CVE-2025-49357 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in audiomack Audiomac... |
| CVE-2025-63032 | MEDIUM | 6.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thinkupthemes Cons... |
| CVE-2025-62991 | MEDIUM | 6.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thinkupthemes Mina... |
| CVE-2025-62757 | MEDIUM | 6.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebMan Design | Ol... |
| CVE-2025-62756 | MEDIUM | 6.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lvaudore The Money... |
| CVE-2025-62752 | MEDIUM | 6.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kalender.digital K... |
| CVE-2025-62749 | MEDIUM | 6.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bainternet User Sp... |
| CVE-2025-62748 | MEDIUM | 6.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Genetech Products ... |
| CVE-2025-62135 | MEDIUM | 6.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in landwire Responsiv... |
| CVE-2025-49358 | MEDIUM | 6.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ruhul Amin Content... |
| CVE-2025-15389 | HIGH | 8.8 | 1.1% | Dec 31, 2025 | VPN Firewall developed by QNO Technology has an OS Command Injection vulnerability, allowing authenticated remote attack... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now