2025 CVE Vulnerabilities
45,202 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-30637 | MEDIUM | 5.9 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Deetronix Booking ... |
| CVE-2025-30636 | MEDIUM | 5.4 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrect... |
| CVE-2025-30634 | MEDIUM | 5.9 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IWEBIX WP Featured... |
| CVE-2025-30632 | MEDIUM | 5.4 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in pozzad Global Translator global-translator allows Cross Site Request ... |
| CVE-2025-30630 | MEDIUM | 5.9 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pozzad Global Tran... |
| CVE-2025-30629 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Codehaveli Bitly URL Shortener codehaveli-bitly-url-shortener allows ... |
| CVE-2025-30627 | MEDIUM | 5.9 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in regolithsjk Elegan... |
| CVE-2025-30625 | MEDIUM | 5.9 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt Pramschufer A... |
| CVE-2025-30624 | MEDIUM | 4.3 | 0.2% | Jun 6, 2025 | Missing Authorization vulnerability in WordLift WordLift wordlift allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2025-29013 | MEDIUM | 5.4 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in faaiq Custom Category/Post Type Post order custom-post-order-category allows Expl... |
| CVE-2025-29011 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CHR Designer YouTu... |
| CVE-2025-29010 | MEDIUM | 4.3 | 0.2% | Jun 6, 2025 | Missing Authorization vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Ex... |
| CVE-2025-29008 | MEDIUM | 4.9 | 0.2% | Jun 6, 2025 | Server-Side Request Forgery (SSRF) vulnerability in ShawonPro SocialMark socialmark allows Server Side Request Forgery.T... |
| CVE-2025-29006 | MEDIUM | 5.3 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in centangle Direct Checkout for WooCommerce Lite woo-direct-checkout-lite allows Ac... |
| CVE-2025-29005 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Weblizar - WordPress Themes & Plugin HR Management Lite hr-management... |
| CVE-2025-29003 | MEDIUM | 6.5 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mva7 The Holiday C... |
| CVE-2025-28997 | MEDIUM | 5.3 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Exploiting Incorrectl... |
| CVE-2025-28996 | MEDIUM | 4.3 | 0.2% | Jun 6, 2025 | Missing Authorization vulnerability in Thad Allender GPP Slideshow gpp-slideshow allows Exploiting Incorrectly Configure... |
| CVE-2025-28995 | MEDIUM | 5.3 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in viralloops Viral Loops WP Integration viral-loops-wp-integration allows Exploitin... |
| CVE-2025-28994 | MEDIUM | 4.3 | 0.2% | Jun 6, 2025 | Missing Authorization vulnerability in viralloops Viral Loops WP Integration viral-loops-wp-integration allows Exploitin... |
| CVE-2025-28989 | MEDIUM | 5.9 | 0.2% | Jun 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arildur Read More ... |
| CVE-2025-28985 | MEDIUM | 5.4 | 0.3% | Jun 6, 2025 | Missing Authorization vulnerability in Elastic Email Elastic Email Subscribe Form elastic-email-subscribe-form allows Ex... |
| CVE-2025-28984 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in storepro Subscription Renewal Reminders for WooCommerce subscriptions... |
| CVE-2025-28952 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Jonathan Lau CubePoints cubepoints allows Cross Site Request Forgery.... |
| CVE-2025-27360 | MEDIUM | 4.3 | 0.1% | Jun 6, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in WP Corner Quick Event Calendar quick-event-calendar allows Cross Site... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now