2025 CVE Vulnerabilities
45,331 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-53247 | HIGH | 8.1 | 0.4% | Aug 28, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-53244 | HIGH | 8.1 | 0.4% | Aug 28, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-53243 | HIGH | 8.1 | 0.3% | Aug 28, 2025 | Deserialization of Untrusted Data vulnerability in emarket-design Employee Directory – Staff Listing & Team Directory Pl... |
| CVE-2025-53230 | HIGH | 7.6 | 0.2% | Aug 28, 2025 | Missing Authorization vulnerability in honzat Page Manager for Elementor page-manager-for-elementor allows Exploiting In... |
| CVE-2025-53227 | HIGH | 8.1 | 0.4% | Aug 28, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-53225 | HIGH | 7.1 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eboekhouden e-Boek... |
| CVE-2025-53224 | HIGH | 7.1 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Koen Schuit NextGE... |
| CVE-2025-53223 | HIGH | 7.1 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in undoIT Theme Switc... |
| CVE-2025-53220 | HIGH | 7.1 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XmasB XmasB Quotes... |
| CVE-2025-53216 | HIGH | 8.1 | 0.4% | Aug 28, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-53215 | HIGH | 7.1 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8bitkid Yahoo! Web... |
| CVE-2025-49407 | HIGH | 8.8 | 0.4% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez ... |
| CVE-2025-49404 | HIGH | 8.5 | 0.3% | Aug 28, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in purethemes Listeo ... |
| CVE-2025-49402 | HIGH | 8.5 | 0.3% | Aug 28, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scriptsbundle Exer... |
| CVE-2025-49383 | HIGH | 8.1 | 0.4% | Aug 28, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-48359 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in thaihavnn07 ATT YouTube Widget att-youtube allows Stored XSS.This iss... |
| CVE-2025-48353 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in dactum Clickbank WordPress Plugin (Niche Storefront) clickbank-niche-... |
| CVE-2025-48351 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in PluginsPoint Kento Splash Screen kento-splash-screen allows Stored XS... |
| CVE-2025-48343 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Aaron Axelsen WPMU Ldap Authentication wpmuldap allows Stored XSS.Thi... |
| CVE-2025-48325 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in shmish111 WP Admin Theme wp-admin-theme allows Stored XSS.This issue ... |
| CVE-2025-48321 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in dyiosah Ultimate twitter profile widget ultimate-twitter-profile-widg... |
| CVE-2025-48320 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in cuckoohello 百度分享按钮 baidushare-wp allows Stored XSS.This issue affects... |
| CVE-2025-48311 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in OffClicks Invisible Optin invisible-optin allows Stored XSS.This issu... |
| CVE-2025-48309 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in web-able BetPress betpress allows Stored XSS.This issue affects BetPr... |
| CVE-2025-48308 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in nonletter Newsletter subscription optin module newsletter-subscriptio... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now