2025 CVE Vulnerabilities
45,356 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-32947 | HIGH | 7.5 | 0.6% | Apr 15, 2025 | This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite lo... |
| CVE-2025-29281 | HIGH | 8.8 | 0.6% | Apr 15, 2025 | In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component... |
| CVE-2025-32929 | HIGH | 7.5 | 0.3% | Apr 15, 2025 | Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Generator for WooCommerce embedding-bar... |
| CVE-2025-31011 | HIGH | 7.1 | 0.2% | Apr 15, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReichertBrothers S... |
| CVE-2025-30962 | HIGH | 7.1 | 0.2% | Apr 15, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fs-code FS Poster ... |
| CVE-2025-26992 | HIGH | 7.1 | 0.2% | Apr 15, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fatcatapps Landing... |
| CVE-2025-26959 | HIGH | 8.8 | 0.3% | Apr 15, 2025 | Missing Authorization vulnerability in Quý Lê 91 Administrator Z administrator-z allows Privilege Escalation.This issue ... |
| CVE-2025-26958 | HIGH | 7.5 | 0.3% | Apr 15, 2025 | Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Accessing Functionality Not Properly Constrain... |
| CVE-2025-26954 | HIGH | 7.1 | 0.2% | Apr 15, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 1pluginjquery ZooE... |
| CVE-2025-26944 | HIGH | 7.5 | 0.3% | Apr 15, 2025 | Missing Authorization vulnerability in Crocoblock JetPopup jet-popup allows Accessing Functionality Not Properly Constra... |
| CVE-2025-26942 | HIGH | 7.5 | 0.3% | Apr 15, 2025 | Missing Authorization vulnerability in Crocoblock JetTricks jet-tricks allows Accessing Functionality Not Properly Const... |
| CVE-2025-26894 | HIGH | 7.5 | 0.5% | Apr 15, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-26889 | HIGH | 7.5 | 0.5% | Apr 15, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-26743 | HIGH | 7.1 | 0.2% | Apr 15, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TC.K Advance WP Qu... |
| CVE-2025-26741 | HIGH | 8.8 | 0.3% | Apr 15, 2025 | Missing Authorization vulnerability in AWEOS GmbH Email Notifications for Updates wp-update-mail-notification allows Pri... |
| CVE-2025-3575 | HIGH | 8.7 | 0.4% | Apr 15, 2025 | Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive infor... |
| CVE-2025-3574 | HIGH | 8.7 | 0.4% | Apr 15, 2025 | Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive infor... |
| CVE-2025-29984 | HIGH | 7.3 | 0.1% | Apr 15, 2025 | Dell Trusted Device, versions prior to 7.0.3.0, contain an Incorrect Default Permissions vulnerability. A low privilege... |
| CVE-2025-29983 | HIGH | 7.3 | 0.1% | Apr 15, 2025 | Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access ('Link Following'... |
| CVE-2025-31491 | HIGH | 8.6 | 0.4% | Apr 15, 2025 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut... |
| CVE-2025-31490 | HIGH | 7.5 | 0.4% | Apr 14, 2025 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut... |
| CVE-2025-3587 | HIGH | 8.8 | 0.4% | Apr 14, 2025 | A vulnerability classified as critical was found in ZeroWdd/code-projects studentmanager 1.0. This vulnerability affects... |
| CVE-2025-3585 | HIGH | 8.8 | 0.4% | Apr 14, 2025 | A vulnerability classified as critical has been found in westboy CicadasCMS 1.0. This affects an unknown part of the fil... |
| CVE-2025-22373 | HIGH | 8.7 | 0.4% | Apr 14, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet B... |
| CVE-2025-32914 | HIGH | 7.4 | 0.6% | Apr 14, 2025 | A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now