2025 CVE Vulnerabilities
45,334 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-57986 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in husani WP Subtitle... |
| CVE-2025-57985 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in MantraBrain Ultimate Watermark ultimate-watermark allows Exploiting Incorrectly C... |
| CVE-2025-57984 | MEDIUM | 4.4 | 0.2% | Sep 22, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Pratik Ghela MakeStories (for Google Web Stories) makestories-helper... |
| CVE-2025-57983 | MEDIUM | 6.5 | 0.1% | Sep 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Damian BP Disable Activation Reloaded bp-disable-activation-reloaded ... |
| CVE-2025-57982 | MEDIUM | 5.9 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean Advance Por... |
| CVE-2025-57981 | MEDIUM | 5.4 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Soc... |
| CVE-2025-57980 | MEDIUM | 5.9 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomas Cordero Safe... |
| CVE-2025-57979 | MEDIUM | 5.9 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Russell Jamieson A... |
| CVE-2025-57978 | MEDIUM | 4.3 | 0.1% | Sep 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in themespride Advanced Appointment Booking & Scheduling advanced-appoin... |
| CVE-2025-57976 | MEDIUM | 5.3 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in CardCom CardCom Payment Gateway woo-cardcom-payment-gateway allows Exploiting Inc... |
| CVE-2025-57975 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control... |
| CVE-2025-57974 | MEDIUM | 5.9 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tuyennv TZ PlusGal... |
| CVE-2025-57973 | MEDIUM | 5.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chad Butler WP-Mem... |
| CVE-2025-57972 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-fo... |
| CVE-2025-57971 | MEDIUM | 5.3 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Config... |
| CVE-2025-57970 | MEDIUM | 4.3 | 0.1% | Sep 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Cross Site Reques... |
| CVE-2025-57969 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Missing Authorization vulnerability in Jeremy Saxey Hide WP Toolbar hide-wp-toolbar allows Exploiting Incorrectly Config... |
| CVE-2025-57967 | MEDIUM | 6.5 | 0.2% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean WPB Quick V... |
| CVE-2025-57966 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Gallery L... |
| CVE-2025-57965 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CodeUs WP Propo... |
| CVE-2025-57964 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in photonicgnostic Li... |
| CVE-2025-57963 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zoho Subscriptions... |
| CVE-2025-57962 | MEDIUM | 5.9 | 0.3% | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRestau... |
| CVE-2025-57961 | MEDIUM | 4.3 | 0.4% | Sep 22, 2025 | Missing Authorization vulnerability in Codexpert, Inc CoDesigner woolementor allows Exploiting Incorrectly Configured Ac... |
| CVE-2025-57960 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in TravelMap Travel Map travelmap-blog allows Cross Site Request Forgery... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now