2025 CVE Vulnerabilities
45,331 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-60146 | MEDIUM | 5.9 | 0.2% | Sep 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amit Verma Map Cat... |
| CVE-2025-60145 | MEDIUM | 4.3 | 0.1% | Sep 26, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Cross Site Req... |
| CVE-2025-60144 | MEDIUM | 5.9 | 0.2% | Sep 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Lenix scss... |
| CVE-2025-60143 | MEDIUM | 4.3 | 0.2% | Sep 26, 2025 | Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Secu... |
| CVE-2025-60142 | MEDIUM | 6.5 | 0.2% | Sep 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DaganLev Simple Me... |
| CVE-2025-60141 | MEDIUM | 5.9 | 0.2% | Sep 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thetechtribe The T... |
| CVE-2025-60140 | MEDIUM | 5.3 | 0.3% | Sep 26, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in thetechtribe The Tribal the-tech-tribe allows Retriev... |
| CVE-2025-60139 | MEDIUM | 4.3 | 0.1% | Sep 26, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allows Cross S... |
| CVE-2025-60138 | MEDIUM | 6.5 | 0.2% | Sep 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT B... |
| CVE-2025-60137 | MEDIUM | 4.3 | 0.1% | Sep 26, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Post Featured Video post-featured-video allows Cross ... |
| CVE-2025-60136 | MEDIUM | 5.9 | 0.2% | Sep 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cartpauj User Note... |
| CVE-2025-60133 | MEDIUM | 5.9 | 0.2% | Sep 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DJ-Extensions.com ... |
| CVE-2025-60130 | MEDIUM | 5.3 | 0.3% | Sep 26, 2025 | Missing Authorization vulnerability in wedos.com WEDOS Global wgpwpp allows Accessing Functionality Not Properly Constra... |
| CVE-2025-60129 | MEDIUM | 5.3 | 0.3% | Sep 26, 2025 | Missing Authorization vulnerability in Yext Yext yext allows Accessing Functionality Not Properly Constrained by ACLs.Th... |
| CVE-2025-60128 | MEDIUM | 4.3 | 0.2% | Sep 26, 2025 | Missing Authorization vulnerability in WP Delicious Delisho dr-widgets-blocks allows Exploiting Incorrectly Configured A... |
| CVE-2025-60127 | MEDIUM | 5.4 | 0.3% | Sep 26, 2025 | Missing Authorization vulnerability in ArtistScope CopySafe Web Protection wp-copysafe-web allows Exploiting Incorrectly... |
| CVE-2025-60125 | MEDIUM | 5.3 | 0.3% | Sep 26, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in themelooks FoodBook foodbook allows Retrieve Embedded... |
| CVE-2025-60124 | MEDIUM | 6.5 | 0.2% | Sep 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan Hellyer Simpl... |
| CVE-2025-60123 | MEDIUM | 4.3 | 0.2% | Sep 26, 2025 | Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Inc... |
| CVE-2025-60122 | MEDIUM | 4.3 | 0.2% | Sep 26, 2025 | Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Inc... |
| CVE-2025-60121 | MEDIUM | 5.3 | 0.3% | Sep 26, 2025 | Missing Authorization vulnerability in Ex-Themes WooEvents woo-events allows Exploiting Incorrectly Configured Access Co... |
| CVE-2025-60120 | MEDIUM | 5.3 | 0.3% | Sep 26, 2025 | Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Conf... |
| CVE-2025-60119 | MEDIUM | 5.3 | 0.3% | Sep 26, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in CoSchedule CoSchedule cosche... |
| CVE-2025-60117 | MEDIUM | 4.3 | 0.1% | Sep 26, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in TangibleWP Vehica Core vehica-core allows Cross Site Request Forgery.... |
| CVE-2025-60115 | MEDIUM | 4.3 | 0.1% | Sep 26, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in instapagedev Instapage Plugin instapage allows Cross Site Request For... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now