2025 CVE Vulnerabilities
45,331 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-9897 | MEDIUM | 4.3 | 0.1% | Oct 3, 2025 | The AP Background plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,... |
| CVE-2025-9895 | MEDIUM | 4.3 | 0.1% | Oct 3, 2025 | The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi... |
| CVE-2025-9892 | MEDIUM | 5.3 | 0.2% | Oct 3, 2025 | The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a... |
| CVE-2025-9889 | MEDIUM | 4.3 | 0.2% | Oct 3, 2025 | The ContentMX Content Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, ... |
| CVE-2025-9885 | MEDIUM | 4.3 | 0.1% | Oct 3, 2025 | The MPWizard – Create Mercado Pago Payment Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in all... |
| CVE-2025-9884 | MEDIUM | 6.1 | 0.1% | Oct 3, 2025 | The Mobile Site Redirect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc... |
| CVE-2025-9876 | MEDIUM | 6.4 | 0.2% | Oct 3, 2025 | The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode ... |
| CVE-2025-9875 | MEDIUM | 6.4 | 0.2% | Oct 3, 2025 | The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 't... |
| CVE-2025-9859 | MEDIUM | 6.4 | 0.2% | Oct 3, 2025 | The Fintelligence Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fintell... |
| CVE-2025-9858 | MEDIUM | 6.4 | 0.2% | Oct 3, 2025 | The Auto Bulb Finder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'a... |
| CVE-2025-9854 | MEDIUM | 6.4 | 0.2% | Oct 3, 2025 | The A Simple Multilanguage Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'as... |
| CVE-2025-9630 | MEDIUM | 4.3 | 0.1% | Oct 3, 2025 | The WP SinoType plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1... |
| CVE-2025-9372 | MEDIUM | 5.5 | 0.2% | Oct 3, 2025 | The Ultimate Multi Design Video Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versio... |
| CVE-2025-9333 | MEDIUM | 5.5 | 0.2% | Oct 3, 2025 | The Smart Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up t... |
| CVE-2025-9332 | MEDIUM | 5.5 | 0.2% | Oct 3, 2025 | The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scriptin... |
| CVE-2025-9206 | MEDIUM | 6.4 | 0.2% | Oct 3, 2025 | The Meks Easy Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title field in all ver... |
| CVE-2025-9204 | MEDIUM | 6.4 | 0.2% | Oct 3, 2025 | The X Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Youtube Video ID fi... |
| CVE-2025-9199 | MEDIUM | 6.5 | 0.3% | Oct 3, 2025 | The Woo superb slideshow transition gallery with random effect plugin for WordPress is vulnerable to SQL Injection via t... |
| CVE-2025-9198 | MEDIUM | 6.5 | 0.3% | Oct 3, 2025 | The Wp cycle text announcement plugin for WordPress is vulnerable to SQL Injection via the 'cycle-text' shortcode in all... |
| CVE-2025-9194 | MEDIUM | 4.3 | 0.2% | Oct 3, 2025 | The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check... |
| CVE-2025-9130 | MEDIUM | 6.4 | 0.3% | Oct 3, 2025 | The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unify_checkou... |
| CVE-2025-9129 | MEDIUM | 6.4 | 0.2% | Oct 3, 2025 | The Flexi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's flexi-form-ta... |
| CVE-2025-9080 | MEDIUM | 6.4 | 0.3% | Oct 3, 2025 | The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in ver... |
| CVE-2025-9077 | MEDIUM | 6.4 | 0.3% | Oct 3, 2025 | The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Animated ... |
| CVE-2025-9045 | MEDIUM | 6.4 | 0.3% | Oct 3, 2025 | The Easy Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widget parameter... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now