2025 CVE Vulnerabilities
45,172 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-48350 | MEDIUM | 4.3 | 0.2% | Aug 28, 2025 | Missing Authorization vulnerability in Basar Ventures AutoWP autowp-ai-content-writer-rewriter allows Exploiting Incorre... |
| CVE-2025-48349 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in origincode Video G... |
| CVE-2025-48348 | MEDIUM | 4.3 | 0.2% | Aug 28, 2025 | Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrect... |
| CVE-2025-48347 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vincent Mimoun-Pra... |
| CVE-2025-48327 | MEDIUM | 5.3 | 0.3% | Aug 28, 2025 | Missing Authorization vulnerability in inkthemes WP Mailgun SMTP wp-mailgun-smtp allows Accessing Functionality Not Prop... |
| CVE-2025-48324 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in khashabawy tli.tl ... |
| CVE-2025-48323 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Md Abunaser Khan A... |
| CVE-2025-48322 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Finn Dohrn Statify... |
| CVE-2025-48319 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gslauraspeck Mesa ... |
| CVE-2025-48318 | MEDIUM | 4.3 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in shen2 多说社会化评论框 duoshuo allows Cross Site Request Forgery.This issue a... |
| CVE-2025-48316 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ItayXD Responsive ... |
| CVE-2025-48315 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stanton119 WordPre... |
| CVE-2025-48314 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in salubrio Add Code ... |
| CVE-2025-48313 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kevin heath Tripad... |
| CVE-2025-48312 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 文派翻译（WP Chinese Tr... |
| CVE-2025-48310 | MEDIUM | 4.3 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in wptableeditor Table Editor wp-table-editor allows Cross Site Request ... |
| CVE-2025-48305 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vikingjs Goal Trac... |
| CVE-2025-48110 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mibuthu Link View ... |
| CVE-2025-9376 | MEDIUM | 6.5 | 0.3% | Aug 28, 2025 | The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to... |
| CVE-2025-55175 | MEDIUM | 6.1 | 0.2% | Aug 28, 2025 | QuickCMS is vulnerable to Reflected XSS via sLangEdit parameter in admin's panel functionality. A malicious attacker can... |
| CVE-2025-54544 | MEDIUM | 4.8 | 0.2% | Aug 28, 2025 | QuickCMS is vulnerable to Stored XSS via aDirFilesDescriptions parameter in files editor functionality. Malicious attack... |
| CVE-2025-54543 | MEDIUM | 4.8 | 0.2% | Aug 28, 2025 | QuickCMS is vulnerable to Stored XSS via sDescriptionMeta parameter in page editor SEO functionality. Malicious attacker... |
| CVE-2025-54542 | MEDIUM | 5.5 | 0.1% | Aug 28, 2025 | QuickCMS sends password and login via GET Request. This allows a local attacker with access to the victim's browser hist... |
| CVE-2025-54541 | MEDIUM | 4.3 | 0.1% | Aug 28, 2025 | QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality. Malicious attacker can craft specia... |
| CVE-2025-54540 | MEDIUM | 6.1 | 0.2% | Aug 28, 2025 | QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin's panel functionality. A malicious attacker can cra... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now