2025 CVE Vulnerabilities
45,202 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-49314 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ovatheme BRW ova-b... |
| CVE-2025-49311 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoolHappy The Even... |
| CVE-2025-49310 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M A Vinoth Kumar F... |
| CVE-2025-49309 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Team... |
| CVE-2025-49306 | MEDIUM | 5.4 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Soc... |
| CVE-2025-49305 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode Product ... |
| CVE-2025-49304 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeManas Search w... |
| CVE-2025-49301 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift ... |
| CVE-2025-49299 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPlugged.com WebHo... |
| CVE-2025-49298 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event p... |
| CVE-2025-49294 | MEDIUM | 5.3 | 0.3% | Jun 6, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Gen... |
| CVE-2025-49293 | MEDIUM | 4.3 | 0.2% | Jun 6, 2025 | Missing Authorization vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator crawlomatic-multipage... |
| CVE-2025-49292 | MEDIUM | 4.3 | 0.3% | Jun 6, 2025 | Improper Validation of Specified Quantity in Input vulnerability in Cozmoslabs Profile Builder profile-builder allows Ph... |
| CVE-2025-49289 | MEDIUM | 5 | 0.2% | Jun 6, 2025 | Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configu... |
| CVE-2025-49287 | MEDIUM | 4.3 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting I... |
| CVE-2025-49286 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in WP Table Builder WP Table Builder wp-table-builder allows Cross Site ... |
| CVE-2025-49285 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdp... |
| CVE-2025-49284 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Maintenance Mode & Site Under Construction wp-maintenance-m... |
| CVE-2025-49283 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Matthias Nordwig Anti-spam, Spam protection, ReCaptcha for all forms ... |
| CVE-2025-49273 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in sminozzi WP Tools wptools allows Cross Site Request Forgery.This issu... |
| CVE-2025-49272 | MEDIUM | 4.3 | 0.2% | Jun 6, 2025 | Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configure... |
| CVE-2025-49270 | MEDIUM | 5.3 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Accessing Functionality Not Prope... |
| CVE-2025-49269 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Anton Vanyukov Market Exporter market-exporter allows Cross Site Requ... |
| CVE-2025-49268 | MEDIUM | 5.3 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in Soft8Soft LLC Verge3D verge3d allows Exploiting Incorrectly Configured Access Con... |
| CVE-2025-49262 | MEDIUM | 5.4 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shaonsina Sina Ext... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now