2025 CVE Vulnerabilities
45,348 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-5929 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The The Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘clientId’ parameter in all ... |
| CVE-2025-5813 | MEDIUM | 5.3 | 0.2% | Jun 26, 2025 | The Amazon Products to WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a miss... |
| CVE-2025-5275 | MEDIUM | 4 | 0.2% | Jun 26, 2025 | The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vul... |
| CVE-2025-6538 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The Post Rating and Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter i... |
| CVE-2025-6383 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The WP-PhotoNav plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's photonav shortcode in... |
| CVE-2025-6378 | MEDIUM | 6.4 | 0.2% | Jun 26, 2025 | The Responsive Food and Drink Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's di... |
| CVE-2025-6290 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The Tournament Bracket Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bra... |
| CVE-2025-6258 | MEDIUM | 6.4 | 0.2% | Jun 26, 2025 | The WP SoundSystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpsstm-track short... |
| CVE-2025-5812 | MEDIUM | 4.3 | 0.2% | Jun 26, 2025 | The VG WORT METIS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch... |
| CVE-2025-5588 | MEDIUM | 6.4 | 0.2% | Jun 26, 2025 | The Image Editor by Pixo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘download’ parameter ... |
| CVE-2025-5564 | MEDIUM | 6.4 | 0.2% | Jun 26, 2025 | The GC Social Wall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gc_social_wall' s... |
| CVE-2025-5559 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The TimeZoneCalculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'timezonecalcu... |
| CVE-2025-5540 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The Event RSVP and Simple Event Management Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ... |
| CVE-2025-5535 | MEDIUM | 6.4 | 0.2% | Jun 26, 2025 | The e.nigma buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcod... |
| CVE-2025-5488 | MEDIUM | 5.4 | 0.2% | Jun 26, 2025 | The WP Masonry & Infinite Scroll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wmi... |
| CVE-2025-3863 | MEDIUM | 4.3 | 0.2% | Jun 26, 2025 | The Post Carousel Slider for Elementor plugin for WordPress is vulnerable to improper authorization due to a missing cap... |
| CVE-2025-6664 | MEDIUM | 4.3 | 0.2% | Jun 25, 2025 | A vulnerability, which was classified as problematic, was found in CodeAstro Patient Record Management System 1.0. Affec... |
| CVE-2025-6444 | MEDIUM | 5.9 | 0.4% | Jun 25, 2025 | ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attac... |
| CVE-2025-5833 | MEDIUM | 6.8 | 0.2% | Jun 25, 2025 | Pioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability. This vulnerability a... |
| CVE-2025-5832 | MEDIUM | 6.8 | 0.2% | Jun 25, 2025 | Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability. This vulnera... |
| CVE-2025-5829 | MEDIUM | 6.8 | 0.3% | Jun 25, 2025 | Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This... |
| CVE-2025-5828 | MEDIUM | 6.8 | 0.3% | Jun 25, 2025 | Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability. This vulnerability ... |
| CVE-2025-5826 | MEDIUM | 6.3 | 0.2% | Jun 25, 2025 | Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability. This vulnerabili... |
| CVE-2025-5823 | MEDIUM | 6.5 | 0.5% | Jun 25, 2025 | Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability. Thi... |
| CVE-2025-49550 | MEDIUM | 4.3 | 0.3% | Jun 25, 2025 | Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Author... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now