2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-39491 | HIGH | 8.1 | 0.4% | May 16, 2025 | Path Traversal vulnerability in WHMPress WHMpress allows Path Traversal. This issue affects WHMpress: from 6.2 through r... |
| CVE-2025-39482 | HIGH | 8.8 | 0.4% | May 16, 2025 | Missing Authorization vulnerability in imithemes Eventer eventer allows Exploiting Incorrectly Configured Access Control... |
| CVE-2025-32310 | HIGH | 8.8 | 0.2% | May 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeMove QuickCal - Appointment Booking Calendar for WordPress quick... |
| CVE-2025-32307 | HIGH | 8.5 | 0.3% | May 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Chame... |
| CVE-2025-32306 | HIGH | 8.5 | 0.3% | May 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Radio... |
| CVE-2025-32301 | HIGH | 8.5 | 0.3% | May 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Count... |
| CVE-2025-32290 | HIGH | 8.5 | 0.3% | May 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Stick... |
| CVE-2025-32287 | HIGH | 8.5 | 0.3% | May 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Respo... |
| CVE-2025-31928 | HIGH | 8.5 | 0.3% | May 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Multi... |
| CVE-2025-31926 | HIGH | 8.5 | 0.3% | May 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Stick... |
| CVE-2025-31922 | HIGH | 7.1 | 0.1% | May 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3_accordions allows Sto... |
| CVE-2025-31641 | HIGH | 8.5 | 0.4% | May 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup UberS... |
| CVE-2025-31640 | HIGH | 8.5 | 0.4% | May 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Magic... |
| CVE-2025-31637 | HIGH | 8.5 | 0.4% | May 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup SHOUT... |
| CVE-2025-4782 | HIGH | 8.8 | 0.5% | May 16, 2025 | A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This ... |
| CVE-2025-4781 | HIGH | 8.8 | 0.5% | May 16, 2025 | A vulnerability classified as critical has been found in PHPGurukul Park Ticketing Management System 2.0. Affected is an... |
| CVE-2025-4778 | HIGH | 8.8 | 0.3% | May 16, 2025 | A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been declared as critical. This vul... |
| CVE-2025-4600 | HIGH | 7.5 | 0.2% | May 16, 2025 | A request smuggling vulnerability existed in the Google Cloud Classic Application Load Balancer due to improper handling... |
| CVE-2025-4211 | HIGH | 7.3 | 0.2% | May 16, 2025 | Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib modu... |
| CVE-2025-4777 | HIGH | 8.8 | 0.3% | May 16, 2025 | A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been classified as critical. This a... |
| CVE-2025-40629 | HIGH | 8.7 | 0.8% | May 16, 2025 | PNETLab 4.2.10 does not properly sanitize user inputs in its file access mechanisms. This allows attackers to perform di... |
| CVE-2025-37890 | HIGH | 7.8 | 0.2% | May 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class w... |
| CVE-2025-2305 | HIGH | 8.6 | 0.3% | May 16, 2025 | A Path traversal vulnerability in the file download functionality was identified. This vulnerability allows unauthentica... |
| CVE-2025-4770 | HIGH | 8.8 | 0.3% | May 16, 2025 | A vulnerability, which was classified as critical, has been found in PHPGurukul Park Ticketing Management System 2.0. Th... |
| CVE-2025-4769 | HIGH | 7.3 | 0.2% | May 16, 2025 | A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknow... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now