2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-47634 | MEDIUM | 6.5 | 0.3% | Jul 4, 2025 | Missing Authorization vulnerability in Keylor Mendoza WC Pickup Store wc-pickup-store allows Exploiting Incorrectly Conf... |
| CVE-2025-47565 | MEDIUM | 6.3 | 0.2% | Jul 4, 2025 | Missing Authorization vulnerability in ashanjay EventON eventon allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2025-28976 | MEDIUM | 6.5 | 0.2% | Jul 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dsrodzin Email Add... |
| CVE-2025-38174 | MEDIUM | 5.5 | 0.2% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Do not double dequeue a configuration ... |
| CVE-2025-5351 | MEDIUM | 6.5 | 0.5% | Jul 4, 2025 | A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for co... |
| CVE-2025-53569 | MEDIUM | 4.3 | 0.1% | Jul 4, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Trust Payments Trust Payments Gateway for WooCommerce (JavaScript Lib... |
| CVE-2025-53568 | MEDIUM | 4.3 | 0.1% | Jul 4, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Tony Zeoli Radio Station radio-station allows Cross Site Request Forg... |
| CVE-2025-53566 | MEDIUM | 6.5 | 0.2% | Jul 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in osama.esh WP Visit... |
| CVE-2025-30983 | MEDIUM | 6.5 | 0.2% | Jul 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus Card flip... |
| CVE-2025-30943 | MEDIUM | 6.5 | 0.2% | Jul 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aakif Kadiwala Pos... |
| CVE-2025-30929 | MEDIUM | 5.3 | 0.2% | Jul 4, 2025 | Missing Authorization vulnerability in amazewp fluXtore fluxtore allows Exploiting Incorrectly Configured Access Control... |
| CVE-2025-29012 | MEDIUM | 5.3 | 0.2% | Jul 4, 2025 | Missing Authorization vulnerability in kamleshyadav CF7 7 Mailchimp Add-on CF7-mailchimp-addon allows Exploiting Incorre... |
| CVE-2025-29007 | MEDIUM | 4.3 | 0.2% | Jul 4, 2025 | Missing Authorization vulnerability in LMSACE LMSACE Connect lmsace-connect allows Exploiting Incorrectly Configured Acc... |
| CVE-2025-29001 | MEDIUM | 4.3 | 0.2% | Jul 4, 2025 | Missing Authorization vulnerability in ZoomIt WooCommerce Shop Page Builder allows Exploiting Incorrectly Configured Acc... |
| CVE-2025-28971 | MEDIUM | 5.9 | 0.2% | Jul 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CWD Web Designer E... |
| CVE-2025-28963 | MEDIUM | 5.4 | 0.2% | Jul 4, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Server Side Req... |
| CVE-2025-28957 | MEDIUM | 6.5 | 0.2% | Jul 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OwnerRez OwnerRez ... |
| CVE-2025-27358 | MEDIUM | 4.6 | 0.2% | Jul 4, 2025 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in N-Media Frontend File Man... |
| CVE-2025-27326 | MEDIUM | 6.5 | 0.2% | Jul 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Video Gal... |
| CVE-2025-26591 | MEDIUM | 6.5 | 0.2% | Jul 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam WP fancy... |
| CVE-2025-24764 | MEDIUM | 6.5 | 0.2% | Jul 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A. Jones (Simply) ... |
| CVE-2025-24757 | MEDIUM | 5.3 | 0.2% | Jul 4, 2025 | Missing Authorization vulnerability in AndonDesign uDesign udesign.This issue affects uDesign: from n/a through <= 4.11.... |
| CVE-2025-24748 | MEDIUM | 5.3 | 0.2% | Jul 4, 2025 | Missing Authorization vulnerability in ThemeFusion Avada avada.This issue affects Avada: from n/a through <= 7.11.10. |
| CVE-2025-23972 | MEDIUM | 4.3 | 0.1% | Jul 4, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Brian S. Reed Contact Form 7 reCAPTCHA contact-form-7-recaptcha allow... |
| CVE-2025-6673 | MEDIUM | 6.4 | 0.2% | Jul 4, 2025 | The Easy restaurant menu manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's nsc_... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now