2025 CVE Vulnerabilities
45,331 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-10131 | MEDIUM | 6.4 | 0.2% | Sep 30, 2025 | The All Social Share Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sc' sho... |
| CVE-2025-10130 | MEDIUM | 6.4 | 0.2% | Sep 30, 2025 | The Layers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'webcam' shortcode in all ... |
| CVE-2025-10128 | MEDIUM | 6.4 | 0.2% | Sep 30, 2025 | The Eulerpool Research Systems plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'aaq' ... |
| CVE-2025-10000 | MEDIUM | 6.4 | 0.4% | Sep 30, 2025 | The Qyrr – simply and modern QR-Code creation plugin for WordPress is vulnerable to arbitrary file uploads due to missin... |
| CVE-2025-61586 | MEDIUM | 5.3 | 0.4% | Sep 30, 2025 | FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below are vulnerable to directory enumeration by s... |
| CVE-2025-59950 | MEDIUM | 5.4 | 0.3% | Sep 30, 2025 | FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking p... |
| CVE-2025-59948 | MEDIUM | 5.4 | 0.3% | Sep 29, 2025 | FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not sanitize certain event handler attrib... |
| CVE-2025-59941 | MEDIUM | 6.5 | 0.2% | Sep 29, 2025 | go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.8 and below, go-f3's justification ... |
| CVE-2025-59940 | MEDIUM | 6.5 | 0.3% | Sep 29, 2025 | mkdocs-include-markdown-plugin is an Mkdocs Markdown includer plugin. In versions 7.1.7 and below, there is a vulnerabil... |
| CVE-2025-43817 | MEDIUM | 6.1 | 0.2% | Sep 29, 2025 | Multiple reflected cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.3.74 through 7.4.3.111, and Liferay ... |
| CVE-2025-43812 | MEDIUM | 5.4 | 0.2% | Sep 29, 2025 | Cross-site scripting (XSS) vulnerability in web content template in Liferay Portal 7.4.3.4 through 7.4.3.111, and Lifera... |
| CVE-2025-57769 | MEDIUM | 6.1 | 0.3% | Sep 29, 2025 | FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below contain a vulnerability where a specially cr... |
| CVE-2025-43820 | MEDIUM | 5.4 | 0.2% | Sep 29, 2025 | Multiple cross-site scripting (XSS) vulnerabilities in the Calendar widget when inviting users to a event in Liferay Por... |
| CVE-2025-43818 | MEDIUM | 6.1 | 0.2% | Sep 29, 2025 | Cross-site scripting (XSS) vulnerability in the Calendar widget in Liferay Portal 7.4.3.35 through 7.4.3.110, and Lifera... |
| CVE-2025-43815 | MEDIUM | 6.1 | 0.2% | Sep 29, 2025 | Reflected cross-site scripting (XSS) vulnerability on the page configuration page in Liferay Portal 7.4.3.102 through 7.... |
| CVE-2025-43811 | MEDIUM | 5.4 | 0.2% | Sep 29, 2025 | Multiple stored cross-site scripting (XSS) vulnerability in the related asset selector in Liferay Portal 7.4.3.50 throug... |
| CVE-2025-34233 | MEDIUM | 6.8 | 0.6% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 2... |
| CVE-2025-34232 | MEDIUM | 5.3 | 0.5% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 2... |
| CVE-2025-34230 | MEDIUM | 5.8 | 0.5% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 2... |
| CVE-2025-34229 | MEDIUM | 5.8 | 0.5% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 2... |
| CVE-2025-34220 | MEDIUM | 5.3 | 0.7% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 2... |
| CVE-2025-34211 | MEDIUM | 4.9 | 0.4% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version ... |
| CVE-2025-56764 | MEDIUM | 5.3 | 0.2% | Sep 29, 2025 | Trivision NC-227WF firmware 5.80 (build 20141010) login mechanism reveals whether a username exists or not by returning ... |
| CVE-2025-35034 | MEDIUM | 6.1 | 0.2% | Sep 29, 2025 | Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the 'portlet_use... |
| CVE-2025-35033 | MEDIUM | 4.3 | 0.2% | Sep 29, 2025 | Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now