2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-13587 | MEDIUM | 6.5 | 0.4% | Feb 19, 2026 | The Two Factor (2FA) Authentication via Email plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in ... |
| CVE-2025-13438 | MEDIUM | 4.3 | 0.2% | Feb 19, 2026 | The Page Title, Description & Open Graph Updater plugin for WordPress is vulnerable to Cross-Site Request Forgery in all... |
| CVE-2025-13413 | MEDIUM | 4.3 | 0.2% | Feb 19, 2026 | The Country Blocker for AdSense plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, ... |
| CVE-2025-13113 | MEDIUM | 5.3 | 0.3% | Feb 19, 2026 | The Web Accessibility by accessiBe plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions ... |
| CVE-2025-13091 | MEDIUM | 4.3 | 0.3% | Feb 19, 2026 | The Shopire theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on ... |
| CVE-2025-13079 | MEDIUM | 5.3 | 0.4% | Feb 19, 2026 | The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to au... |
| CVE-2025-13048 | MEDIUM | 6.4 | 0.2% | Feb 19, 2026 | The StatCounter – Free Real Time Visitor Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... |
| CVE-2025-12884 | MEDIUM | 4.3 | 0.3% | Feb 19, 2026 | The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to authorization bypass in versions up to, an... |
| CVE-2025-12500 | MEDIUM | 5.3 | 0.3% | Feb 19, 2026 | The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to unauthenticated limi... |
| CVE-2025-12451 | MEDIUM | 4.4 | 0.2% | Feb 19, 2026 | The Easy SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versi... |
| CVE-2025-12448 | MEDIUM | 6.4 | 0.3% | Feb 19, 2026 | The Smartsupp – live chat, AI shopping assistant and chatbots plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
| CVE-2025-12375 | MEDIUM | 6.4 | 0.3% | Feb 19, 2026 | The Printful Integration for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versio... |
| CVE-2025-12172 | MEDIUM | 4.3 | 0.1% | Feb 19, 2026 | The Mailchimp List Subscribe Form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to... |
| CVE-2025-12117 | MEDIUM | 6.4 | 0.2% | Feb 19, 2026 | The Renden theme for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions up to, an... |
| CVE-2025-12116 | MEDIUM | 6.4 | 0.2% | Feb 19, 2026 | The Drift theme for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions up to, and... |
| CVE-2025-12081 | MEDIUM | 4.3 | 0.3% | Feb 19, 2026 | The ACF Photo Gallery Field plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap... |
| CVE-2025-12027 | MEDIUM | 4.3 | 0.3% | Feb 19, 2026 | The Mesmerize Companion plugin for WordPress is vulnerable to unauthorized access and modification of data due to a miss... |
| CVE-2025-11725 | MEDIUM | 6.5 | 0.3% | Feb 19, 2026 | The Aruba HiSpeed Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabil... |
| CVE-2025-11706 | MEDIUM | 6.1 | 0.3% | Feb 19, 2026 | The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the dbstatus parameter ... |
| CVE-2025-15585 | MEDIUM | 6.7 | 0.2% | Feb 19, 2026 | Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file searc... |
| CVE-2025-15581 | MEDIUM | 4.7 | 0.4% | Feb 18, 2026 | Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authenticati... |
| CVE-2025-12812 | MEDIUM | 5.3 | 0.3% | Feb 18, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Delinea Inc. Cloud Suite and Pri... |
| CVE-2025-12811 | MEDIUM | 6.9 | 0.3% | Feb 18, 2026 | Improper Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Delinea Inc. Cloud Suite and Privile... |
| CVE-2025-14876 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length li... |
| CVE-2025-12343 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now