2025 CVE Vulnerabilities
45,343 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-53757 | HIGH | 8.7 | 0.3% | Jul 16, 2025 | This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on ses... |
| CVE-2025-53756 | HIGH | 8.7 | 0.3% | Jul 16, 2025 | This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web manageme... |
| CVE-2025-52819 | HIGH | 8.5 | 0.3% | Jul 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pakkemx Pakke Enví... |
| CVE-2025-52804 | HIGH | 7.5 | 0.3% | Jul 16, 2025 | Missing Authorization vulnerability in uxper Nuss nuss allows Accessing Functionality Not Properly Constrained by ACLs.T... |
| CVE-2025-52803 | HIGH | 7.5 | 0.3% | Jul 16, 2025 | Missing Authorization vulnerability in uxper Sala allows Accessing Functionality Not Properly Constrained by ACLs. This ... |
| CVE-2025-52787 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EZiHosting Tennis ... |
| CVE-2025-52786 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kingdom Creation M... |
| CVE-2025-52779 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in karimmughal Dot ht... |
| CVE-2025-52777 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmsMinds Pay with ... |
| CVE-2025-49888 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Missing Authorization vulnerability in pimwick PW WooCommerce On Sale! pw-woocommerce-on-sale allows Exploiting Incorrec... |
| CVE-2025-49876 | HIGH | 8.5 | 0.3% | Jul 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileG... |
| CVE-2025-49034 | HIGH | 7.6 | 0.3% | Jul 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel Builde... |
| CVE-2025-49031 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefan M. SMu Manu... |
| CVE-2025-48345 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arisoft Contact Fo... |
| CVE-2025-48291 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker /... |
| CVE-2025-47652 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infility Infility ... |
| CVE-2025-47645 | HIGH | 8.5 | 0.3% | Jul 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX ... |
| CVE-2025-47554 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs CSS3 ... |
| CVE-2025-46500 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ValvePress Wordpre... |
| CVE-2025-32574 | HIGH | 8.5 | 0.3% | Jul 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPGYM all... |
| CVE-2025-31427 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Invic... |
| CVE-2025-31422 | HIGH | 8.8 | 0.4% | Jul 16, 2025 | Deserialization of Untrusted Data vulnerability in designthemes Visual Art | Gallery WordPress Theme visual-arts allows ... |
| CVE-2025-31072 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Ofiz ... |
| CVE-2025-31070 | HIGH | 7.5 | 0.5% | Jul 16, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup HTML5 Radio... |
| CVE-2025-31055 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vergatheme Electri... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now