2025 CVE Vulnerabilities
45,343 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-51967 | MEDIUM | 6.1 | 0.2% | Aug 28, 2025 | A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Manag... |
| CVE-2025-58127 | MEDIUM | 4.8 | 0.1% | Aug 28, 2025 | Improper Certificate Validation in Checkmk Exchange plugin Dell Powerscale allows attackers in MitM position to intercep... |
| CVE-2025-58126 | MEDIUM | 4.8 | 0.1% | Aug 28, 2025 | Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept tr... |
| CVE-2025-58125 | MEDIUM | 4.8 | 0.1% | Aug 28, 2025 | Improper Certificate Validation in Checkmk Exchange plugin Freebox v6 agent allows attackers in MitM position to interce... |
| CVE-2025-58124 | MEDIUM | 4.8 | 0.1% | Aug 28, 2025 | Improper Certificate Validation in Checkmk Exchange plugin check-mk-api allows attackers in MitM position to intercept t... |
| CVE-2025-58123 | MEDIUM | 4.8 | 0.1% | Aug 28, 2025 | Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept... |
| CVE-2025-54734 | MEDIUM | 5.8 | 0.2% | Aug 28, 2025 | Missing Authorization vulnerability in bPlugins B Slider b-slider allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2025-54733 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Missing Authorization vulnerability in all_bootstrap_blocks All Bootstrap Blocks all-bootstrap-blocks allows Exploiting ... |
| CVE-2025-53337 | MEDIUM | 5.4 | 0.2% | Aug 28, 2025 | Missing Authorization vulnerability in Ashan Perera LifePress lifepress allows Exploiting Incorrectly Configured Access ... |
| CVE-2025-53250 | MEDIUM | 6.4 | 0.2% | Aug 28, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Chartbeat Chartbeat chartbeat allows Server Side Request Forgery.Thi... |
| CVE-2025-49405 | MEDIUM | 4.3 | 0.2% | Aug 28, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-48365 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imaprogrammer Cust... |
| CVE-2025-48364 | MEDIUM | 4.9 | 0.2% | Aug 28, 2025 | Server-Side Request Forgery (SSRF) vulnerability in vEnCa-X rajce rajce allows Server Side Request Forgery.This issue af... |
| CVE-2025-48363 | MEDIUM | 4.3 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Metin Saraç Popup for CF7 with Sweet Alert cf7-sweet-alert-popup allo... |
| CVE-2025-48362 | MEDIUM | 5.4 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Cros... |
| CVE-2025-48361 | MEDIUM | 5.3 | 0.3% | Aug 28, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accoun... |
| CVE-2025-48360 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Razvan Stanga Varn... |
| CVE-2025-48358 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in everythingwp Risk ... |
| CVE-2025-48357 | MEDIUM | 5.4 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Theme Century Century ToolKit century-toolkit allows Cross Site Reque... |
| CVE-2025-48356 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Isra Kanpress kanp... |
| CVE-2025-48354 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Smart Widgets B... |
| CVE-2025-48352 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sitesearch-yandex ... |
| CVE-2025-48350 | MEDIUM | 4.3 | 0.2% | Aug 28, 2025 | Missing Authorization vulnerability in Basar Ventures AutoWP autowp-ai-content-writer-rewriter allows Exploiting Incorre... |
| CVE-2025-48349 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in origincode Video G... |
| CVE-2025-48348 | MEDIUM | 4.3 | 0.2% | Aug 28, 2025 | Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrect... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now