2025 CVE Vulnerabilities
45,199 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-1294 | HIGH | 7.2 | 0.3% | Apr 24, 2025 | The eForm - WordPress Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up ... |
| CVE-2025-25777 | HIGH | 8 | 0.2% | Apr 24, 2025 | Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user p... |
| CVE-2025-46530 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in HuangYe WuDeng Hacklog Remote Attachment hacklog-remote-attachment al... |
| CVE-2025-46528 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Steve Availability Calendar availability allows Stored XSS.This issue... |
| CVE-2025-46524 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in stesvis WP Filter Post Category wp-filter-post-categories allows Stor... |
| CVE-2025-46522 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Billy Bryant Tabs gt-tabs allows Stored XSS.This issue affects Tabs: ... |
| CVE-2025-46520 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in alphasis Related Posts via Taxonomies related-posts-via-taxonomies al... |
| CVE-2025-46516 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in silencecm Twitter Card Generator twitter-card-generator allows Stored... |
| CVE-2025-46514 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in milat Milat jQuery Automatic Popup milat-jquery-automatic-popup allow... |
| CVE-2025-46512 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Shamim Hasan Custom Functions Plugin custom-functions allows Stored X... |
| CVE-2025-46510 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in harrysudana Contact Form 7 Calendar cf7-calendar allows Stored XSS.Th... |
| CVE-2025-46508 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in kasonzhao Advanced lazy load advanced-lazy-load allows Stored XSS.Thi... |
| CVE-2025-46507 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in ldrumm Unsafe Mimetypes unsafe-mimetypes allows Stored XSS.This issue... |
| CVE-2025-46506 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Lora77 WpZon – Amazon Affiliate Plugin wpzon allows Reflected XSS.Thi... |
| CVE-2025-46504 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Olar Marius Vasaio QR Code vasaio-qr-code allows Stored XSS.This issu... |
| CVE-2025-46502 | HIGH | 7.1 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bas Matthee LSD Cu... |
| CVE-2025-46499 | HIGH | 7.1 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hccoder PayPal Exp... |
| CVE-2025-46497 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Navegg Navegg Analytics navegg allows Stored XSS.This issue affects N... |
| CVE-2025-46492 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Pham Thanh Call Now PHT Blog call-now-coccoc-pht-blog allows Stored X... |
| CVE-2025-46481 | HIGH | 7.2 | 0.5% | Apr 24, 2025 | Deserialization of Untrusted Data vulnerability in Michael Cannon Flickr Shortcode Importer flickr-shortcode-importer al... |
| CVE-2025-46478 | HIGH | 7.1 | 0.2% | Apr 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in metaloha Dropdown ... |
| CVE-2025-46473 | HIGH | 7.2 | 0.5% | Apr 24, 2025 | Deserialization of Untrusted Data vulnerability in Prisna Social Counter social-counter allows Object Injection.This iss... |
| CVE-2025-46466 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in felixtz Modern Polls modern-polls allows Stored XSS.This issue affect... |
| CVE-2025-46465 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in John Weissberg Print Science Designer print-science-designer allows S... |
| CVE-2025-46457 | HIGH | 7.1 | 0.1% | Apr 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Ahsanullah Akanda Wp Custom CMS Block wp-custom-cms-block allows Stor... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now