2025 CVE Vulnerabilities
45,348 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-49995 | MEDIUM | 5.3 | 0.3% | Jun 20, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in dFactory Download Attachments download-attachments all... |
| CVE-2025-49993 | MEDIUM | 5.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in csarturas Cookie-Script.com cookie-script-com allows Exploiting Incorrectly Confi... |
| CVE-2025-49991 | MEDIUM | 5.3 | 0.3% | Jun 20, 2025 | Missing Authorization vulnerability in tggfref WP-Recall allows Accessing Functionality Not Properly Constrained by ACLs... |
| CVE-2025-49990 | MEDIUM | 5.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Prop... |
| CVE-2025-49989 | MEDIUM | 5.3 | 0.3% | Jun 20, 2025 | Missing Authorization vulnerability in App Cheap App Builder app-builder allows Exploiting Incorrectly Configured Access... |
| CVE-2025-49988 | MEDIUM | 5.3 | 0.4% | Jun 20, 2025 | Missing Authorization vulnerability in Renzo Johnson Contact Form 7 AWeber Extension integrate-contact-form-7-and-aweber... |
| CVE-2025-49987 | MEDIUM | 5.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in WPFactory CRM ERP Business Solution crm-erp-business-solution allows Exploiting I... |
| CVE-2025-49986 | MEDIUM | 5.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in thanhtungtnt Video List Manager video-list-manager allows Accessing Functionality... |
| CVE-2025-49985 | MEDIUM | 4.9 | 0.2% | Jun 20, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Ali Irani Auto Upload Images auto-upload-images allows Server Side R... |
| CVE-2025-49984 | MEDIUM | 4.9 | 0.2% | Jun 20, 2025 | Server-Side Request Forgery (SSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows Server Side Request ... |
| CVE-2025-49983 | MEDIUM | 4.9 | 0.2% | Jun 20, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Joe Hoyle WPThumb wp-thumb allows Server Side Request Forgery.This i... |
| CVE-2025-49982 | MEDIUM | 4.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly C... |
| CVE-2025-49981 | MEDIUM | 4.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in mahabub81 User Roles and Capabilities user-roles-and-capabilities allows Exploiti... |
| CVE-2025-49980 | MEDIUM | 4.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in WP Event Manager WP User Profile Avatar wp-user-profile-avatar allows Exploiting ... |
| CVE-2025-49979 | MEDIUM | 4.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in slui Media Hygiene media-hygiene allows Exploiting Incorrectly Configured Access ... |
| CVE-2025-49978 | MEDIUM | 4.3 | 0.3% | Jun 20, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch wp-jobsearch allows Exploiting Incorr... |
| CVE-2025-49977 | MEDIUM | 4.3 | 0.1% | Jun 20, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in WP Inventory WP Inventory Manager wp-inventory-manager allows Cross S... |
| CVE-2025-49976 | MEDIUM | 4.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in WANotifier Notifier notifier allows Exploiting Incorrectly Configured Access Cont... |
| CVE-2025-49975 | MEDIUM | 4.3 | 0.1% | Jun 20, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP jobwp allows Cross Site Request Forgery.This iss... |
| CVE-2025-49974 | MEDIUM | 4.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in upstreamplugin UpStream: a Project Management Plugin for WordPress upstream allow... |
| CVE-2025-49973 | MEDIUM | 4.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in GrandPlugins Image Sizes Controller, Create Custom Image Sizes, Disable Image Siz... |
| CVE-2025-49972 | MEDIUM | 4.3 | 0.1% | Jun 20, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in David Wood TM Replace Howdy tm-replace-howdy allows Cross Site Reques... |
| CVE-2025-49971 | MEDIUM | 4.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows Exploiting ... |
| CVE-2025-49970 | MEDIUM | 4.3 | 0.2% | Jun 20, 2025 | Missing Authorization vulnerability in sparklewpthemes Hello FSE Blog hello-fse-blog allows Exploiting Incorrectly Confi... |
| CVE-2025-49969 | MEDIUM | 4.3 | 0.3% | Jun 20, 2025 | Missing Authorization vulnerability in Zara 4 Zara 4 Image Compression zara-4 allows Exploiting Incorrectly Configured A... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now