2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-71244 | MEDIUM | 6.1 | 0.2% | Feb 19, 2026 | SPIP before 4.4.5 and 4.3.9 allows an Open Redirect via the login form when used in AJAX mode. An attacker can craft a m... |
| CVE-2025-71242 | MEDIUM | 6.5 | 0.2% | Feb 19, 2026 | SPIP before 4.3.6, 4.2.17, and 4.1.20 allows unauthorized content disclosure in the private area. The application does n... |
| CVE-2025-71241 | MEDIUM | 6.1 | 0.2% | Feb 19, 2026 | SPIP before 4.3.6, 4.2.17, and 4.1.20 allows Cross-Site Scripting (XSS) in the private area. The content of the error me... |
| CVE-2025-71240 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | SPIP before 4.2.15 allows Cross-Site Scripting (XSS) via crafted content in HTML code tags. The application does not pro... |
| CVE-2025-15563 | MEDIUM | 5.3 | 0.3% | Feb 19, 2026 | Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the... |
| CVE-2025-15562 | MEDIUM | 6.1 | 0.2% | Feb 19, 2026 | The server API endpoint /report/internet/urls reflects received data into the HTML response without applying proper enco... |
| CVE-2025-41023 | MEDIUM | 6.9 | 0.4% | Feb 19, 2026 | An authentication bypass vulnerability has been found in Thesamur's AutoGPT. This vulnerability allows an attacker to by... |
| CVE-2025-40697 | MEDIUM | 5.1 | 0.4% | Feb 19, 2026 | Reflected Cross-Site Scripting (XSS) vulnerability in '/index.php' in Lewe WebMeasure, which allows remote attackers to ... |
| CVE-2025-14983 | MEDIUM | 6.4 | 0.3% | Feb 19, 2026 | The Advanced Custom Fields: Font Awesome Field plugin for WordPress is vulnerable to Cross-Site Scripting in all version... |
| CVE-2025-14864 | MEDIUM | 4.3 | 0.3% | Feb 19, 2026 | The Virusdie - One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all ve... |
| CVE-2025-14851 | MEDIUM | 6.4 | 0.2% | Feb 19, 2026 | The YaMaps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `yamap` shortcode par... |
| CVE-2025-14445 | MEDIUM | 6.4 | 0.2% | Feb 19, 2026 | The Image Hotspot by DevVN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hotspot_content' c... |
| CVE-2025-14427 | MEDIUM | 4.3 | 0.2% | Feb 19, 2026 | The Shield Security: Blocks Bots, Protects Users, and Prevents Security Breaches plugin for WordPress is vulnerable to u... |
| CVE-2025-14357 | MEDIUM | 5.3 | 0.2% | Feb 19, 2026 | The Mega Store Woocommerce theme for WordPress is vulnerable to unauthorized modification of data due to a missing capab... |
| CVE-2025-14342 | MEDIUM | 4.3 | 0.3% | Feb 19, 2026 | The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ... |
| CVE-2025-14294 | MEDIUM | 5.3 | 0.4% | Feb 19, 2026 | The Razorpay for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ca... |
| CVE-2025-14167 | MEDIUM | 4.3 | 0.2% | Feb 19, 2026 | The Remove Post Type Slug plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and in... |
| CVE-2025-14076 | MEDIUM | 6.1 | 0.3% | Feb 19, 2026 | The iXML – Google XML sitemap generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'iX... |
| CVE-2025-13930 | MEDIUM | 5.3 | 0.4% | Feb 19, 2026 | The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass... |
| CVE-2025-13864 | MEDIUM | 5.3 | 0.4% | Feb 19, 2026 | The Breeze - WordPress Cache Plugin plugin for WordPress is vulnerable to unauthorized cache clearing in all versions up... |
| CVE-2025-13842 | MEDIUM | 5.3 | 0.3% | Feb 19, 2026 | The Breadcrumb NavXT plugin for WordPress is vulnerable to authorization bypass through user-controlled key in versions ... |
| CVE-2025-13738 | MEDIUM | 6.4 | 0.3% | Feb 19, 2026 | The Easy Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ez-toc` s... |
| CVE-2025-13732 | MEDIUM | 6.4 | 0.3% | Feb 19, 2026 | The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin... |
| CVE-2025-13617 | MEDIUM | 6.4 | 0.3% | Feb 19, 2026 | The Apollo13 Framework Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘a13_alt_lin... |
| CVE-2025-13612 | MEDIUM | 6.4 | 0.3% | Feb 19, 2026 | The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now