2025 CVE Vulnerabilities
45,202 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-49250 | MEDIUM | 4.3 | 0.3% | Jun 6, 2025 | Improper Control of Generation of Code ('Code Injection') vulnerability in cmoreira Team Showcase team-showcase-cm allow... |
| CVE-2025-49248 | MEDIUM | 4.3 | 0.2% | Jun 6, 2025 | Missing Authorization vulnerability in cmoreira Team Showcase team-showcase-cm allows Exploiting Incorrectly Configured ... |
| CVE-2025-49246 | MEDIUM | 4.3 | 0.2% | Jun 6, 2025 | Missing Authorization vulnerability in cmoreira Testimonials Showcase testimonials-showcase allows Exploiting Incorrectl... |
| CVE-2025-49244 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vova Shortcodes Ul... |
| CVE-2025-49243 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sevenspark ShiftNa... |
| CVE-2025-49242 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sevenspark Bellows... |
| CVE-2025-49241 | MEDIUM | 5.3 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in bobbingwide oik oik allows Exploiting Incorrectly Configured Access Control Secur... |
| CVE-2025-49240 | MEDIUM | 4.3 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in nK DocsPress docspress allows Exploiting Incorrectly Configured Access Control Se... |
| CVE-2025-49239 | MEDIUM | 5.4 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocomm... |
| CVE-2025-49238 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Cross Site Request... |
| CVE-2025-49236 | MEDIUM | 5.3 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in raychat Raychat raychat allows Accessing Functionality Not Properly Constrained b... |
| CVE-2025-49235 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rometheme RTMKit r... |
| CVE-2025-31025 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blocksera Image Ho... |
| CVE-2025-31000 | MEDIUM | 5.3 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in Miguel Fuentes Payment QR WooCommerce payment-qr-woo allows Exploiting Incorrectl... |
| CVE-2025-30997 | MEDIUM | 5.4 | 0.2% | Jun 6, 2025 | Server-Side Request Forgery (SSRF) vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server ... |
| CVE-2025-30994 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Cross Site Request Forge... |
| CVE-2025-30991 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada WPDM – Pr... |
| CVE-2025-30990 | MEDIUM | 5.4 | 0.2% | Jun 6, 2025 | Missing Authorization vulnerability in ThemeHunk ThemeHunk themehunk-megamenu-plus allows Exploiting Incorrectly Configu... |
| CVE-2025-30986 | MEDIUM | 5.4 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in _CreativeMedia_ Elite Video Player elite-video-player allows Cross Si... |
| CVE-2025-30981 | MEDIUM | 6.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in tggfref WP-Recall allows Privilege Escalation. This issue affects WP-... |
| CVE-2025-30980 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi Simple Keyword to Link simple-keyword-to-link allow... |
| CVE-2025-30978 | MEDIUM | 4.3 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in Dor Zuberi Slack Notifications by dorzki dorzki-notifications-to-slack allows Exp... |
| CVE-2025-30977 | MEDIUM | 5.9 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chaport Live Chat ... |
| CVE-2025-30976 | MEDIUM | 4.9 | 0.2% | Jun 6, 2025 | Server-Side Request Forgery (SSRF) vulnerability in wpdive Nexa Blocks nexa-blocks allows Server Side Request Forgery.Th... |
| CVE-2025-30968 | MEDIUM | 5.4 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in jokerbr313 Advanced Post List advanced-post-list allows Cross Site Re... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now