2025 CVE Vulnerabilities
45,325 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-68535 | MEDIUM | 4.3 | 0.2% | Dec 24, 2025 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incor... |
| CVE-2025-68533 | MEDIUM | 6.5 | 0.1% | Dec 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes WC Build... |
| CVE-2025-68532 | MEDIUM | 6.5 | 0.1% | Dec 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in modeltheme ModelTh... |
| CVE-2025-68530 | HIGH | 7.5 | 0.3% | Dec 24, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68529 | MEDIUM | 4.3 | 0.1% | Dec 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Rhys Wynne WP Email Capture wp-email-capture allows Cross Site Reques... |
| CVE-2025-68528 | MEDIUM | 6.5 | 0.1% | Dec 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Free Shi... |
| CVE-2025-68527 | MEDIUM | 6.5 | 0.1% | Dec 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kodezen LLC Academ... |
| CVE-2025-68525 | MEDIUM | 5.9 | 0.1% | Dec 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixelgrade Categor... |
| CVE-2025-68523 | MEDIUM | 4.3 | 0.2% | Dec 24, 2025 | Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly Conf... |
| CVE-2025-68522 | MEDIUM | 4.3 | 0.2% | Dec 24, 2025 | Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2025-68521 | MEDIUM | 5.3 | 0.2% | Dec 24, 2025 | Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2025-68519 | HIGH | 8.5 | 0.2% | Dec 24, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BeRocket Brands fo... |
| CVE-2025-68517 | MEDIUM | 5.4 | 0.2% | Dec 24, 2025 | Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Contr... |
| CVE-2025-68516 | MEDIUM | 5 | 0.2% | Dec 24, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in Essekia Tablesome tablesome allows Retrieve Embedded ... |
| CVE-2025-68513 | MEDIUM | 6.5 | 0.1% | Dec 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Ti... |
| CVE-2025-68512 | MEDIUM | 6.5 | 0.1% | Dec 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativeinteractiv... |
| CVE-2025-68511 | MEDIUM | 6.5 | 0.2% | Dec 24, 2025 | Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting Incorrectly Configure... |
| CVE-2025-68509 | MEDIUM | 4.7 | 0.5% | Dec 24, 2025 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Jeff Starr User Submitted Posts user-submitted-post... |
| CVE-2025-68508 | MEDIUM | 5.3 | 0.2% | Dec 24, 2025 | Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access C... |
| CVE-2025-68506 | HIGH | 8.1 | 0.4% | Dec 24, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68505 | MEDIUM | 5.3 | 0.3% | Dec 24, 2025 | Missing Authorization vulnerability in icc0rz H5P h5p allows Exploiting Incorrectly Configured Access Control Security L... |
| CVE-2025-68500 | MEDIUM | 4.9 | 0.2% | Dec 24, 2025 | Server-Side Request Forgery (SSRF) vulnerability in bdthemes Prime Slider – Addons For Elementor bdthemes-prime-slider-l... |
| CVE-2025-68497 | MEDIUM | 5.9 | 0.3% | Dec 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force A... |
| CVE-2025-68496 | HIGH | 7.6 | 0.5% | Dec 24, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Syed Balkhi User F... |
| CVE-2025-68494 | MEDIUM | 5.3 | 0.3% | Dec 24, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for El... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now