2025 CVE Vulnerabilities
45,169 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-64233 | CRITICAL | 9.8 | 0.3% | Dec 18, 2025 | Deserialization of Untrusted Data vulnerability in BoldThemes Codiqa codiqa allows Object Injection.This issue affects C... |
| CVE-2025-64231 | CRITICAL | 9.9 | 0.3% | Dec 18, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in RedefiningTheWeb WordPress Contact Form 7 PDF, Google S... |
| CVE-2025-64230 | HIGH | 7.7 | 0.3% | Dec 18, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Chill Filr filr-prote... |
| CVE-2025-64227 | CRITICAL | 9.8 | 0.3% | Dec 18, 2025 | Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows O... |
| CVE-2025-64225 | MEDIUM | 6.5 | 0.3% | Dec 18, 2025 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in colabrio Stockie Extra st... |
| CVE-2025-64223 | HIGH | 8.1 | 0.4% | Dec 18, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-64222 | HIGH | 7.5 | 0.2% | Dec 18, 2025 | Missing Authorization vulnerability in FantasticPlugins WooCommerce Recover Abandoned Cart rac allows Exploiting Incorre... |
| CVE-2025-64221 | HIGH | 7.1 | 0.2% | Dec 18, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Reser... |
| CVE-2025-64218 | HIGH | 7.5 | 0.3% | Dec 18, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in WP Chill Passster content-protector allows Retrieve E... |
| CVE-2025-64217 | HIGH | 7.1 | 0.2% | Dec 18, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photogr... |
| CVE-2025-64214 | HIGH | 7.5 | 0.3% | Dec 18, 2025 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro... |
| CVE-2025-64213 | HIGH | 7.5 | 0.3% | Dec 18, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-le... |
| CVE-2025-64209 | HIGH | 7.5 | 0.3% | Dec 18, 2025 | Missing Authorization vulnerability in StylemixThemes Masterstudy masterstudy allows Accessing Functionality Not Properl... |
| CVE-2025-64207 | HIGH | 7.1 | 0.2% | Dec 18, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah jan... |
| CVE-2025-64206 | CRITICAL | 9.8 | 0.4% | Dec 18, 2025 | Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jann... |
| CVE-2025-64205 | HIGH | 8.1 | 0.3% | Dec 18, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-64203 | HIGH | 7.1 | 0.2% | Dec 18, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EverPress Mailster... |
| CVE-2025-64193 | HIGH | 7.5 | 0.4% | Dec 18, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-64192 | MEDIUM | 6.3 | 0.2% | Dec 18, 2025 | Missing Authorization vulnerability in 8theme XStore xstore allows Exploiting Incorrectly Configured Access Control Secu... |
| CVE-2025-64191 | HIGH | 7.1 | 0.2% | Dec 18, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore xsto... |
| CVE-2025-64189 | HIGH | 7.1 | 0.2% | Dec 18, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core... |
| CVE-2025-64188 | CRITICAL | 9.8 | 0.4% | Dec 18, 2025 | Incorrect Privilege Assignment vulnerability in PenciDesign Soledad soledad allows Privilege Escalation.This issue affec... |
| CVE-2025-63039 | MEDIUM | 6.5 | 0.2% | Dec 18, 2025 | Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Acces... |
| CVE-2025-60182 | HIGH | 7.1 | 0.2% | Dec 18, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Schiocco Support B... |
| CVE-2025-60180 | CRITICAL | 9.8 | 0.4% | Dec 18, 2025 | Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows O... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now