2025 CVE Vulnerabilities
45,203 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-64384 | MEDIUM | 5.3 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configure... |
| CVE-2025-64383 | MEDIUM | 6.5 | 0.1% | Nov 13, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Qode Qi Blocks qi-... |
| CVE-2025-64382 | MEDIUM | 4.3 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in WebToffee Order Export & Order Import for WooCommerce order-import-export-for-woo... |
| CVE-2025-64381 | MEDIUM | 6.5 | 0.1% | Nov 13, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevelop Booking ... |
| CVE-2025-64380 | MEDIUM | 6.5 | 0.1% | Nov 13, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster f... |
| CVE-2025-64379 | MEDIUM | 4.3 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectl... |
| CVE-2025-64370 | MEDIUM | 5.3 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in YOP YOP Poll yop-poll allows Exploiting Incorrectly Configured Access Control Sec... |
| CVE-2025-64369 | MEDIUM | 6.5 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly... |
| CVE-2025-64292 | MEDIUM | 6.5 | 0.1% | Nov 13, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PascalBajorat Anal... |
| CVE-2025-64277 | MEDIUM | 5.3 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Cont... |
| CVE-2025-64276 | MEDIUM | 6.5 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in Ays Pro Survey Maker survey-maker allows Exploiting Incorrectly Configured Access... |
| CVE-2025-64275 | MEDIUM | 6.5 | 0.1% | Nov 13, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevelop Booking ... |
| CVE-2025-64274 | MEDIUM | 4.3 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows Ex... |
| CVE-2025-64271 | MEDIUM | 6.5 | 0.1% | Nov 13, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Reque... |
| CVE-2025-64269 | MEDIUM | 4.3 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploit... |
| CVE-2025-64267 | MEDIUM | 4.3 | 0.2% | Nov 13, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimat... |
| CVE-2025-64265 | MEDIUM | 4.3 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorre... |
| CVE-2025-64264 | MEDIUM | 5.9 | 0.1% | Nov 13, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon f... |
| CVE-2025-64263 | MEDIUM | 5.4 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in PluginEver WP Content Pilot wp-content-pilot allows Exploiting Incorrectly Config... |
| CVE-2025-64262 | MEDIUM | 6.5 | 0.1% | Nov 13, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in ramon fincken Auto Prune Posts auto-prune-posts allows Cross Site Req... |
| CVE-2025-64261 | MEDIUM | 5.4 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Explo... |
| CVE-2025-64259 | MEDIUM | 5.3 | 0.2% | Nov 13, 2025 | Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configu... |
| CVE-2025-8397 | MEDIUM | 6.4 | 0.2% | Nov 13, 2025 | The Save as PDF Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's restpackpdfbut... |
| CVE-2025-12015 | MEDIUM | 4.3 | 0.2% | Nov 13, 2025 | The Convert WebP & AVIF | Quicq | Best image optimizer and compression plugin | Improve your Google Pagespeed plugin for... |
| CVE-2025-11769 | MEDIUM | 6.4 | 0.2% | Nov 13, 2025 | The WordPress Content Flipper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bgcolor' shortc... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now