2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-7818 | MEDIUM | 5.4 | 0.3% | Jul 19, 2025 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as problematic. Affected... |
| CVE-2025-7817 | MEDIUM | 5.4 | 0.3% | Jul 19, 2025 | A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as problematic. Aff... |
| CVE-2025-38351 | MEDIUM | 5.5 | 0.2% | Jul 19, 2025 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses duri... |
| CVE-2025-7816 | MEDIUM | 5.4 | 0.3% | Jul 19, 2025 | A vulnerability, which was classified as problematic, was found in PHPGurukul Apartment Visitors Management System 1.0. ... |
| CVE-2025-7815 | MEDIUM | 5.4 | 0.2% | Jul 19, 2025 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Apartment Visitors Management System ... |
| CVE-2025-6997 | MEDIUM | 5.4 | 0.2% | Jul 19, 2025 | The ThemeREX Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versio... |
| CVE-2025-6721 | MEDIUM | 5.3 | 0.3% | Jul 19, 2025 | The Vchasno Kasa plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on ... |
| CVE-2025-6720 | MEDIUM | 5.3 | 0.4% | Jul 19, 2025 | The Vchasno Kasa plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on th... |
| CVE-2025-7669 | MEDIUM | 6.1 | 0.1% | Jul 19, 2025 | The Avishi WP PayPal Payment Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up ... |
| CVE-2025-7661 | MEDIUM | 6.4 | 0.2% | Jul 19, 2025 | The Partnerský systém Martinus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'marti... |
| CVE-2025-7658 | MEDIUM | 6.4 | 0.2% | Jul 19, 2025 | The Temporarily Hidden Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'temph... |
| CVE-2025-7655 | MEDIUM | 6.4 | 0.2% | Jul 19, 2025 | The Live Stream Badger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'livestream' s... |
| CVE-2025-7653 | MEDIUM | 6.4 | 0.2% | Jul 19, 2025 | The EPay.bg Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'epay' shortcode... |
| CVE-2025-52924 | MEDIUM | 4 | 0.2% | Jul 19, 2025 | In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untruste... |
| CVE-2025-7396 | MEDIUM | 4.6 | 0.2% | Jul 18, 2025 | In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding conf... |
| CVE-2025-50583 | MEDIUM | 4.8 | 0.2% | Jul 18, 2025 | StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Student module... |
| CVE-2025-50582 | MEDIUM | 4.8 | 0.2% | Jul 18, 2025 | StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Course module. |
| CVE-2025-50581 | MEDIUM | 4.8 | 0.2% | Jul 18, 2025 | MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/group/save.do... |
| CVE-2025-7803 | MEDIUM | 5.1 | 0.2% | Jul 18, 2025 | A vulnerability was found in descreekert wx-discuz up to 12bd4745c63ec203cb32119bf77ead4a923bf277. It has been classifie... |
| CVE-2025-54310 | MEDIUM | 5.3 | 0.4% | Jul 18, 2025 | qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidge... |
| CVE-2025-50584 | MEDIUM | 4.8 | 0.2% | Jul 18, 2025 | StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module... |
| CVE-2025-7802 | MEDIUM | 5.4 | 0.2% | Jul 18, 2025 | A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as problematic. Affected by this ... |
| CVE-2025-7800 | MEDIUM | 5.1 | 0.2% | Jul 18, 2025 | A vulnerability classified as problematic was found in cgpandey hotelmis up to c572198e6c4780fccc63b1d3e8f3f72f825fc94e.... |
| CVE-2025-7798 | MEDIUM | 6.3 | 0.2% | Jul 18, 2025 | A vulnerability classified as critical has been found in Beijing Shenzhou Shihan Technology Multimedia Integrated Busine... |
| CVE-2025-52163 | MEDIUM | 6.5 | 0.2% | Jul 18, 2025 | A Server-Side Request Forgery (SSRF) in the component TunnelServlet of agorum Software GmbH Agorum core open v11.9.2 & v... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now