2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-32595 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-32308 | HIGH | 7.6 | 0.3% | Jun 9, 2025 | Missing Authorization vulnerability in looks_awesome Team Builder a-team-showcase allows Exploiting Incorrectly Configur... |
| CVE-2025-32305 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sneeit WordPress F... |
| CVE-2025-31925 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT... |
| CVE-2025-31920 | HIGH | 8.5 | 0.3% | Jun 9, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech WP Gupp... |
| CVE-2025-31917 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Unive... |
| CVE-2025-31638 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeton Spare all... |
| CVE-2025-31635 | HIGH | 7.5 | 0.5% | Jun 9, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup CLEVER lbg-... |
| CVE-2025-31426 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Stick... |
| CVE-2025-31061 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in redqteam Wishlist ... |
| CVE-2025-31058 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Revol... |
| CVE-2025-31057 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Unive... |
| CVE-2025-31050 | HIGH | 7.5 | 0.5% | Jun 9, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in appthaplugins Apptha Sli... |
| CVE-2025-31045 | HIGH | 7.5 | 0.4% | Jun 9, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in elfsight elfsight Contact Fo... |
| CVE-2025-31019 | HIGH | 8.8 | 0.5% | Jun 9, 2025 | Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Password Policy Manager password-po... |
| CVE-2025-28992 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-28945 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-28944 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-28888 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-27362 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-26592 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-24770 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-24768 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-23974 | HIGH | 8.1 | 0.3% | Jun 9, 2025 | Incorrect Privilege Assignment vulnerability in ifkooo One-Login one-login allows Privilege Escalation.This issue affect... |
| CVE-2025-5877 | HIGH | 8.1 | 0.3% | Jun 9, 2025 | A vulnerability, which was classified as problematic, has been found in Fengoffice Feng Office 3.2.2.1. Affected by this... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now