2025 CVE Vulnerabilities
45,177 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-5806 | HIGH | 8 | 0.4% | Jun 6, 2025 | Jenkins Gatling Plugin 136.vb_9009b_3d33a_e serves Gatling reports in a manner that bypasses the Content-Security-Policy... |
| CVE-2025-5791 | HIGH | 7.1 | 0.2% | Jun 6, 2025 | A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listin... |
| CVE-2025-49453 | HIGH | 7.1 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Jatinder Pal Singh BP Profile as Homepage bp-profile-as-homepage allo... |
| CVE-2025-49425 | HIGH | 7.1 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Adrian Hanft Konami Easter Egg konami-easter-egg allows Stored XSS.Th... |
| CVE-2025-49421 | HIGH | 7.6 | 0.3% | Jun 6, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Andrei Filonov WP ... |
| CVE-2025-49328 | HIGH | 7.6 | 0.3% | Jun 6, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agile Logix Store ... |
| CVE-2025-49327 | HIGH | 7.6 | 0.3% | Jun 6, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia Short... |
| CVE-2025-49326 | HIGH | 7.6 | 0.3% | Jun 6, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiP... |
| CVE-2025-49323 | HIGH | 8.5 | 0.3% | Jun 6, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Hydra Boo... |
| CVE-2025-49315 | HIGH | 7.6 | 0.4% | Jun 6, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PersianScript Pers... |
| CVE-2025-49313 | HIGH | 7.5 | 0.5% | Jun 6, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-49308 | HIGH | 7.5 | 0.5% | Jun 6, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-49307 | HIGH | 7.5 | 0.5% | Jun 6, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-49291 | HIGH | 8.8 | 0.2% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross... |
| CVE-2025-49288 | HIGH | 8.8 | 0.5% | Jun 6, 2025 | Missing Authorization vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Authentication Bypass.This is... |
| CVE-2025-49263 | HIGH | 7.6 | 0.4% | Jun 6, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WCVendors WC Vendo... |
| CVE-2025-49237 | HIGH | 7.4 | 0.2% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in POEditor POEditor poeditor allows Path Traversal.This issue affects P... |
| CVE-2025-38000 | HIGH | 7.8 | 0.2% | Jun 6, 2025 | In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek i... |
| CVE-2025-30999 | HIGH | 7.5 | 0.5% | Jun 6, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-30995 | HIGH | 7.1 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Stored X... |
| CVE-2025-30989 | HIGH | 7.6 | 0.4% | Jun 6, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Renzo Tejada Libro... |
| CVE-2025-30974 | HIGH | 8.8 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows Exploiting Incorrec... |
| CVE-2025-28986 | HIGH | 8.2 | 0.2% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Webaholicson Epicwin Plugin epicwin-subscribers allows SQL Injection.... |
| CVE-2025-28981 | HIGH | 7.1 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Soli WP Mail Options wp-mail-options allows Stored XSS.This issue aff... |
| CVE-2025-28974 | HIGH | 7.1 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in mail250 Free WP Mail SMTP free-wp-mail-smtp allows Stored XSS.This is... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now