2025 CVE Vulnerabilities
45,172 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14387 | MEDIUM | 6.4 | 0.2% | Dec 15, 2025 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions ... |
| CVE-2025-13888 | CRITICAL | 9.1 | 0.6% | Dec 15, 2025 | A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system in... |
| CVE-2025-13824 | HIGH | 8.7 | 0.3% | Dec 15, 2025 | A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard f... |
| CVE-2025-13823 | HIGH | 7.1 | 0.2% | Dec 15, 2025 | A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received mult... |
| CVE-2025-34412 | — | — | — | Dec 15, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it identified a vulne... |
| CVE-2025-34411 | — | — | — | Dec 15, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it identified a vulne... |
| CVE-2025-34181 | HIGH | 8.7 | 0.9% | Dec 15, 2025 | NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFIL... |
| CVE-2025-34180 | HIGH | 8.4 | 0.1% | Dec 15, 2025 | NetSupport Manager < 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and ... |
| CVE-2025-34179 | HIGH | 8.7 | 0.3% | Dec 15, 2025 | NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gatew... |
| CVE-2025-14383 | HIGH | 7.5 | 0.4% | Dec 15, 2025 | The Booking Calendar plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'dates_to_check' param... |
| CVE-2025-14156 | CRITICAL | 9.8 | 5.8% | Dec 15, 2025 | The Fox LMS – WordPress LMS Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and... |
| CVE-2025-14003 | MEDIUM | 4.3 | 0.2% | Dec 15, 2025 | The Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data d... |
| CVE-2025-13950 | MEDIUM | 5.3 | 0.3% | Dec 15, 2025 | The OneSignal – Web Push Notifications plugin for WordPress is vulnerable to unauthorized modification of data due to a ... |
| CVE-2025-13728 | MEDIUM | 6.4 | 0.2% | Dec 15, 2025 | The FluentAuth – The Ultimate Authorization & Security Plugin for WordPress plugin for WordPress is vulnerable to Stored... |
| CVE-2025-13610 | MEDIUM | 6.4 | 0.2% | Dec 15, 2025 | The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu... |
| CVE-2025-13608 | MEDIUM | 6.4 | 0.2% | Dec 15, 2025 | The CC Child Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'child_pages' shortcode in ... |
| CVE-2025-13367 | MEDIUM | 6.4 | 0.3% | Dec 15, 2025 | The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restrict... |
| CVE-2025-12900 | MEDIUM | 4.3 | 0.2% | Dec 15, 2025 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to missing authorizatio... |
| CVE-2025-65782 | MEDIUM | 6.5 | 0.2% | Dec 15, 2025 | An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authorization ... |
| CVE-2025-65781 | HIGH | 8.2 | 0.3% | Dec 15, 2025 | An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Attachment upl... |
| CVE-2025-65780 | HIGH | 8.8 | 0.3% | Dec 15, 2025 | An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authenticated ... |
| CVE-2025-65779 | HIGH | 7.5 | 0.3% | Dec 15, 2025 | An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Unauthenticate... |
| CVE-2025-65778 | HIGH | 8.1 | 0.3% | Dec 15, 2025 | An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Uploaded attac... |
| CVE-2025-65431 | MEDIUM | 5.4 | 0.1% | Dec 15, 2025 | An issue was discovered in allauth-django before 65.13.0. Both Okta and NetIQ were using preferred_username as the ident... |
| CVE-2025-65430 | MEDIUM | 5.4 | 0.1% | Dec 15, 2025 | An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as is_active=False after having handed tok... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now