2025 CVE Vulnerabilities
45,184 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-50370 | MEDIUM | 6.5 | 0.1% | Jun 27, 2025 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php... |
| CVE-2025-50369 | MEDIUM | 6.5 | 0.1% | Jun 27, 2025 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) ... |
| CVE-2025-50367 | MEDIUM | 6.1 | 0.2% | Jun 27, 2025 | A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/co... |
| CVE-2025-6705 | MEDIUM | 5.3 | 0.2% | Jun 27, 2025 | A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads o... |
| CVE-2025-6768 | MEDIUM | 6.3 | 0.2% | Jun 27, 2025 | A vulnerability classified as critical has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef38... |
| CVE-2025-53336 | MEDIUM | 6.5 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in abditsori My Resum... |
| CVE-2025-53327 | MEDIUM | 4.3 | 0.1% | Jun 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in rui_mashita Aioseo Multibyte Descriptions aioseo-multibyte-descriptio... |
| CVE-2025-53325 | MEDIUM | 5.9 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dilip kumar Beauty... |
| CVE-2025-53323 | MEDIUM | 4.3 | 0.2% | Jun 27, 2025 | Missing Authorization vulnerability in danbriapps Pre-Publish Post Checklist pre-publish-post-checklist allows Exploitin... |
| CVE-2025-53322 | MEDIUM | 5.3 | 0.2% | Jun 27, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Authorize.NET Payments Using Contac... |
| CVE-2025-53321 | MEDIUM | 6.5 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Raise The Money Ra... |
| CVE-2025-53320 | MEDIUM | 6.5 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wp Enhanced Free D... |
| CVE-2025-53318 | MEDIUM | 5.4 | 0.2% | Jun 27, 2025 | Missing Authorization vulnerability in WPManiax WP DB Booster wp-db-booster allows Exploiting Incorrectly Configured Acc... |
| CVE-2025-53309 | MEDIUM | 5.3 | 0.2% | Jun 27, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Stripe Payments Using Contact Form ... |
| CVE-2025-53304 | MEDIUM | 5.3 | 0.3% | Jun 27, 2025 | Missing Authorization vulnerability in Rohil Contact Form – 7 : Hide Success Message contact-form-7-hide-success-message... |
| CVE-2025-53301 | MEDIUM | 6.5 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme Junkie Theme... |
| CVE-2025-53300 | MEDIUM | 6.5 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in douglaskarr Podcas... |
| CVE-2025-53298 | MEDIUM | 4.9 | 0.4% | Jun 27, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gioni Plugin Inspector p... |
| CVE-2025-53296 | MEDIUM | 5.9 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ecoal95 EC Stars R... |
| CVE-2025-53295 | MEDIUM | 5.3 | 0.3% | Jun 27, 2025 | Missing Authorization vulnerability in iCount iCount Payment Gateway icount allows Accessing Functionality Not Properly ... |
| CVE-2025-53294 | MEDIUM | 6.5 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Smart Agenda Smart... |
| CVE-2025-53293 | MEDIUM | 4.3 | 0.2% | Jun 27, 2025 | Missing Authorization vulnerability in Morten Dalgaard Johansen Dashboard Widget Sidebar dashboard-widget-sidebar allows... |
| CVE-2025-53292 | MEDIUM | 6.5 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in samsk WP DataTable... |
| CVE-2025-53290 | MEDIUM | 6.5 | 0.2% | Jun 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MS WP Visual Sitem... |
| CVE-2025-53288 | MEDIUM | 4.3 | 0.2% | Jun 27, 2025 | Missing Authorization vulnerability in Adrian Ladó PlatiOnline Payments plationline allows Exploiting Incorrectly Config... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now