2025 CVE Vulnerabilities
45,158 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-57917 | MEDIUM | 4.3 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integ... |
| CVE-2025-57916 | MEDIUM | 4.3 | 0.3% | Sep 22, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Nurul Amin WP System Informa... |
| CVE-2025-57915 | MEDIUM | 4.3 | 0.1% | Sep 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in César Martín TOCHAT.BE tochat-be allows Cross Site Request Forgery.Th... |
| CVE-2025-57914 | MEDIUM | 4.3 | 0.1% | Sep 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Matat Technologies Deliver via Shipos for WooCommerce wc-shipos-deliv... |
| CVE-2025-57913 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eleopard Behance P... |
| CVE-2025-57912 | MEDIUM | 5.9 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dialogity Dialogit... |
| CVE-2025-57911 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Adverts ... |
| CVE-2025-57910 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AnyClip Video Plat... |
| CVE-2025-57909 | MEDIUM | 6.5 | 0.4% | Sep 22, 2025 | Missing Authorization vulnerability in Rouergue Création Editor Custom Color Palette editor-custom-color-palette allows ... |
| CVE-2025-57908 | MEDIUM | 5.9 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProWCPlugins Produ... |
| CVE-2025-57907 | MEDIUM | 5.3 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in Heureka Group Heureka heureka allows Accessing Functionality Not Properly Constra... |
| CVE-2025-57906 | MEDIUM | 5.9 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in epeken Epeken All ... |
| CVE-2025-57905 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Amin Y AgreeMe Checkboxes For WooCommerce agreeme-checkboxes-for-wooc... |
| CVE-2025-57904 | MEDIUM | 5.9 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP-EXPERTS.IN Sale... |
| CVE-2025-57903 | MEDIUM | 5.9 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPSuperiors Develo... |
| CVE-2025-57902 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Md Taufiqur Rahman RIS Version Switcher – Downgrade or Upgrade WP Ver... |
| CVE-2025-57900 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ataur R GutenKit g... |
| CVE-2025-57899 | MEDIUM | 5.3 | 0.4% | Sep 22, 2025 | Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Accessing Functionality Not... |
| CVE-2025-57898 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Vega WP Front... |
| CVE-2025-55887 | MEDIUM | 6.1 | 0.4% | Sep 22, 2025 | Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in... |
| CVE-2025-53570 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DELUCKS DELUCKS SE... |
| CVE-2025-53469 | MEDIUM | 5.9 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mortgage Calculato... |
| CVE-2025-53467 | MEDIUM | 5.9 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Login-Lo... |
| CVE-2025-53466 | MEDIUM | 5.9 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeSolz Better Fi... |
| CVE-2025-53464 | MEDIUM | 5.9 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Online Optimisatio... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now