2025 CVE Vulnerabilities
45,170 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-58639 | MEDIUM | 5.4 | 0.2% | Sep 3, 2025 | Missing Authorization vulnerability in Ali Khallad Contact Form By Mega Forms mega-forms allows Exploiting Incorrectly C... |
| CVE-2025-58635 | MEDIUM | 5.3 | 0.2% | Sep 3, 2025 | Missing Authorization vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configure... |
| CVE-2025-58634 | MEDIUM | 5.3 | 0.2% | Sep 3, 2025 | Missing Authorization vulnerability in peachpay PeachPay Payments peachpay-for-woocommerce allows Exploiting Incorrectly... |
| CVE-2025-58633 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Deetronix Booking ... |
| CVE-2025-58632 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dadevarzan Dadevar... |
| CVE-2025-58631 | MEDIUM | 5.9 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZEEN101 IssueM iss... |
| CVE-2025-58630 | MEDIUM | 5.9 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rbaer Simple Matom... |
| CVE-2025-58626 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RumbleTalk RumbleT... |
| CVE-2025-58625 | MEDIUM | 5.9 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins WP ... |
| CVE-2025-58624 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in falselight Exchang... |
| CVE-2025-58623 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bohemia Plugins Ev... |
| CVE-2025-58622 | MEDIUM | 4.3 | 0.2% | Sep 3, 2025 | Missing Authorization vulnerability in yydevelopment Mobile Contact Line mobile-contact-line allows Exploiting Incorrect... |
| CVE-2025-58621 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amuse Labs PuzzleM... |
| CVE-2025-58620 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org PDF fo... |
| CVE-2025-58618 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonathan Jernigan ... |
| CVE-2025-58617 | MEDIUM | 4.3 | 0.2% | Sep 3, 2025 | Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies f4-media-taxonomies allows Exploiting Incorrectly... |
| CVE-2025-58616 | MEDIUM | 6.5 | 0.3% | Sep 3, 2025 | Missing Authorization vulnerability in Frisbii Frisbii Pay reepay-checkout-gateway allows Exploiting Incorrectly Configu... |
| CVE-2025-58615 | MEDIUM | 4.4 | 0.2% | Sep 3, 2025 | Server-Side Request Forgery (SSRF) vulnerability in gfazioli WP Bannerize Pro wp-bannerize-pro allows Server Side Reques... |
| CVE-2025-58614 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jamel.Z Tooltipy b... |
| CVE-2025-58613 | MEDIUM | 5.3 | 0.3% | Sep 3, 2025 | Missing Authorization vulnerability in Barn2 Plugins Posts Table with Search & Sort posts-data-table allows Exploiting I... |
| CVE-2025-58612 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive Prop... |
| CVE-2025-58611 | MEDIUM | 4.3 | 0.1% | Sep 3, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Tickera Tickera tickera-event-ticketing-system allows Cross Site Requ... |
| CVE-2025-58610 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery P... |
| CVE-2025-58609 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Iulia Cazan Latest... |
| CVE-2025-58607 | MEDIUM | 6.5 | 0.2% | Sep 3, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GDPR Info Cookie N... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now