2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-27802 | MEDIUM | 4.8 | 0.3% | Jul 28, 2025 | The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) v... |
| CVE-2025-27801 | MEDIUM | 4.8 | 0.3% | Jul 28, 2025 | The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) v... |
| CVE-2025-27800 | MEDIUM | 4.8 | 0.4% | Jul 28, 2025 | The Episerver Content Management System (CMS) by Optimizely was affected by multiple Stored Cross-Site Scripting (XSS) v... |
| CVE-2025-8267 | MEDIUM | 5.3 | 0.5% | Jul 28, 2025 | Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery (SSRF) due to an incomplete... |
| CVE-2025-8258 | MEDIUM | 5.3 | 0.2% | Jul 28, 2025 | A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Androi... |
| CVE-2025-8257 | MEDIUM | 5.3 | 0.2% | Jul 28, 2025 | A vulnerability classified as problematic was found in Lobby Universe Lobby App up to 2.8.0 on Android. Affected by this... |
| CVE-2025-8231 | MEDIUM | 6.8 | 0.7% | Jul 27, 2025 | A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects so... |
| CVE-2025-8224 | MEDIUM | 5.5 | 0.2% | Jul 27, 2025 | A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability affects the functi... |
| CVE-2025-8223 | MEDIUM | 4.3 | 0.3% | Jul 27, 2025 | A vulnerability, which was classified as problematic, was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f... |
| CVE-2025-8222 | MEDIUM | 5.4 | 0.3% | Jul 27, 2025 | A vulnerability, which was classified as problematic, has been found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c... |
| CVE-2025-8221 | MEDIUM | 6.1 | 0.5% | Jul 27, 2025 | A vulnerability classified as problematic was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f61... |
| CVE-2025-8104 | MEDIUM | 4.3 | 0.2% | Jul 27, 2025 | The Memory Usage plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, ... |
| CVE-2025-54597 | MEDIUM | 6.1 | 0.6% | Jul 27, 2025 | LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter. |
| CVE-2025-6241 | MEDIUM | 4.4 | 0.2% | Jul 27, 2025 | LsiAgent.exe, a component of SysTrack from Lakeside Software, attempts to load several DLL files which are not present i... |
| CVE-2025-8211 | MEDIUM | 6.1 | 0.3% | Jul 26, 2025 | A vulnerability was found in Roothub up to 2.6. It has been declared as problematic. Affected by this vulnerability is t... |
| CVE-2025-8210 | MEDIUM | 4.4 | 0.2% | Jul 26, 2025 | A vulnerability was found in Yeelink Yeelight App up to 3.5.4 on Android. It has been classified as problematic. Affecte... |
| CVE-2025-8207 | MEDIUM | 4.4 | 0.2% | Jul 26, 2025 | A vulnerability was found in Canara ai1 Mobile Banking App 3.6.23 on Android and classified as problematic. This issue a... |
| CVE-2025-8206 | MEDIUM | 4.7 | 0.5% | Jul 26, 2025 | A vulnerability, which was classified as problematic, was found in Comodo Dragon up to 134.0.6998.179. This affects an u... |
| CVE-2025-8191 | MEDIUM | 5.4 | 1.6% | Jul 26, 2025 | A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown f... |
| CVE-2025-5529 | MEDIUM | 6.4 | 0.3% | Jul 26, 2025 | The Educenter theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Circle Counter Block in all versi... |
| CVE-2025-8097 | MEDIUM | 5.3 | 0.3% | Jul 26, 2025 | The WoodMart theme for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 8.2.6.... |
| CVE-2025-7501 | MEDIUM | 6.4 | 0.3% | Jul 26, 2025 | The Wonder Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image title and description... |
| CVE-2025-6987 | MEDIUM | 6.4 | 0.3% | Jul 26, 2025 | The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advanced_iframe'... |
| CVE-2025-8103 | MEDIUM | 4.3 | 0.2% | Jul 26, 2025 | The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a... |
| CVE-2025-54414 | MEDIUM | 5.1 | 0.5% | Jul 26, 2025 | Anubis is a Web AI Firewall Utility that weighs the soul of users' connections using one or more challenges in order to ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now