2025 CVE Vulnerabilities
45,155 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-57998 | MEDIUM | 5.9 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hamid Reza Yazdani... |
| CVE-2025-57997 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in Trustpilot Trustpilot Reviews trustpilot-reviews allows Exploiting Incorrectly Co... |
| CVE-2025-57996 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in matthewordie Bucke... |
| CVE-2025-57995 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor allows Exploiting Incor... |
| CVE-2025-57994 | MEDIUM | 5.4 | 0.3% | Sep 22, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in Sayful Islam Upcoming Events Lists upcoming-events-lis... |
| CVE-2025-57993 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benjamin Pick Geol... |
| CVE-2025-57992 | MEDIUM | 4.3 | 0.1% | Sep 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in InterServer Mail Baby SMTP mail-baby-smtp allows Cross Site Request F... |
| CVE-2025-57991 | MEDIUM | 5.4 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in Clariti Clariti clariti allows Exploiting Incorrectly Configured Access Control S... |
| CVE-2025-57990 | MEDIUM | 5.4 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in solwininfotech Blog Designer blog-designer allows Exploiting Incorrectly Configur... |
| CVE-2025-57989 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brajesh Singh Word... |
| CVE-2025-57988 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncann... |
| CVE-2025-57987 | MEDIUM | 5.3 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in ThimPress WP Events Manager wp-events-manager allows Exploiting Incorrectly Confi... |
| CVE-2025-57986 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in husani WP Subtitle... |
| CVE-2025-57985 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in MantraBrain Ultimate Watermark ultimate-watermark allows Exploiting Incorrectly C... |
| CVE-2025-57984 | MEDIUM | 4.4 | 0.2% | Sep 22, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Pratik Ghela MakeStories (for Google Web Stories) makestories-helper... |
| CVE-2025-57983 | MEDIUM | 6.5 | 0.1% | Sep 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Damian BP Disable Activation Reloaded bp-disable-activation-reloaded ... |
| CVE-2025-57982 | MEDIUM | 5.9 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean Advance Por... |
| CVE-2025-57981 | MEDIUM | 5.4 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Soc... |
| CVE-2025-57980 | MEDIUM | 5.9 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomas Cordero Safe... |
| CVE-2025-57979 | MEDIUM | 5.9 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Russell Jamieson A... |
| CVE-2025-57978 | MEDIUM | 4.3 | 0.1% | Sep 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in themespride Advanced Appointment Booking & Scheduling advanced-appoin... |
| CVE-2025-57976 | MEDIUM | 5.3 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in CardCom CardCom Payment Gateway woo-cardcom-payment-gateway allows Exploiting Inc... |
| CVE-2025-57975 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control... |
| CVE-2025-57974 | MEDIUM | 5.9 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tuyennv TZ PlusGal... |
| CVE-2025-57973 | MEDIUM | 5.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chad Butler WP-Mem... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now