2025 CVE Vulnerabilities
45,334 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-58957 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in Vikas Ratudi VPSUForm v-form allows Exploiting Incorrectly Configured Access Cont... |
| CVE-2025-58704 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ren Ventura WP Del... |
| CVE-2025-58703 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skyword Skyword AP... |
| CVE-2025-58702 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebWizards MarketK... |
| CVE-2025-58691 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Russell Jamieson G... |
| CVE-2025-58689 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tapfiliate Tapfili... |
| CVE-2025-58685 | MEDIUM | 5.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in cecabank Cecabank WooCommerce Plugin cecabank-woocommerce allows Exploiting Incor... |
| CVE-2025-58684 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Logo S... |
| CVE-2025-58683 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Luke Mlsna Last Up... |
| CVE-2025-58682 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timur Kamaev Kama ... |
| CVE-2025-58681 | MEDIUM | 5.3 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in Jürgen Müller Easy Quotes easy-quotes allows Exploiting Incorrectly Configured Ac... |
| CVE-2025-58680 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2025-58679 | MEDIUM | 5.3 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in AppMySite AppMySite appmysite allows Exploiting Incorrectly Configured Access Con... |
| CVE-2025-58678 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured Access ... |
| CVE-2025-58675 | MEDIUM | 4.3 | 0.1% | Sep 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in tryinteract Interact: Embed A Quiz On Your Site interact-quiz-embed a... |
| CVE-2025-58673 | MEDIUM | 5.4 | 0.2% | Sep 22, 2025 | Improper Control of Generation of Code ('Code Injection') vulnerability in weDevs WP User Frontend wp-user-frontend allo... |
| CVE-2025-58672 | MEDIUM | 5.4 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured... |
| CVE-2025-58669 | MEDIUM | 5.9 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Modern Minds Magen... |
| CVE-2025-58667 | MEDIUM | 5.4 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Exploiting Incorrectly ... |
| CVE-2025-58666 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in Kommo Website Chat Button: Kommo integration website-chat-button-kommo-integratio... |
| CVE-2025-58665 | MEDIUM | 5.9 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tmontg1 Form Gener... |
| CVE-2025-58664 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in Azizul Hasan Text To Speech TTS Accessibility text-to-audio allows Exploiting Inc... |
| CVE-2025-58663 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in Themeum Qubely qubely allows Exploiting Incorrectly Configured Access Control Sec... |
| CVE-2025-58661 | MEDIUM | 5.9 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eZee Technosys eZe... |
| CVE-2025-58660 | MEDIUM | 5.4 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in brandexponents Oshine Core oshine-core allows Exploiting Incorrectly Configured A... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now