2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14079 | MEDIUM | 5.3 | 0.3% | Feb 5, 2026 | The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Missing Authorization in a... |
| CVE-2025-13416 | MEDIUM | 4.3 | 0.3% | Feb 5, 2026 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized user suspensi... |
| CVE-2025-10258 | MEDIUM | 6.3 | 0.3% | Feb 5, 2026 | Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may r... |
| CVE-2025-68699 | MEDIUM | 6.5 | 0.3% | Feb 4, 2026 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In version 0.24.6, NanoMQ has a protocol parsing /... |
| CVE-2025-70545 | MEDIUM | 6.1 | 0.4% | Feb 4, 2026 | A stored cross-site scripting (XSS) vulnerability exists in the web management interface of the PPC (Belden) ONT 2K05X r... |
| CVE-2025-70997 | MEDIUM | 6.5 | 0.2% | Feb 4, 2026 | A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password... |
| CVE-2025-69618 | MEDIUM | 6.5 | 0.3% | Feb 4, 2026 | An arbitrary file overwrite vulnerability in the file import process of Tarot, Astro & Healing v11.4.0 allows attackers ... |
| CVE-2025-14740 | MEDIUM | 6.7 | 0.2% | Feb 4, 2026 | Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling... |
| CVE-2025-41085 | MEDIUM | 5.1 | 0.2% | Feb 4, 2026 | Stored Cross-Site Scripting (XSS) vulnerability type in Apidog in the version 2.7.15, where SVG image uploads are not p... |
| CVE-2025-15508 | MEDIUM | 5.3 | 0.3% | Feb 4, 2026 | The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions... |
| CVE-2025-15507 | MEDIUM | 5.3 | 0.3% | Feb 4, 2026 | The Magic Import Document Extractor plugin for WordPress is vulnerable to unauthorized modification of data due to a mis... |
| CVE-2025-15487 | MEDIUM | 4.9 | 0.4% | Feb 4, 2026 | The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via t... |
| CVE-2025-15482 | MEDIUM | 5.3 | 0.3% | Feb 4, 2026 | The Chapa Payment Gateway Plugin for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in... |
| CVE-2025-15260 | MEDIUM | 6.5 | 0.3% | Feb 4, 2026 | The MyRewards – Loyalty Points and Rewards for WooCommerce plugin for WordPress is vulnerable to missing authorization i... |
| CVE-2025-14461 | MEDIUM | 5.3 | 0.3% | Feb 4, 2026 | The Xendit Payment plugin for WordPress is vulnerable to unauthorized order status manipulation in all versions up to, a... |
| CVE-2025-69620 | MEDIUM | 5 | 0.2% | Feb 4, 2026 | A path traversal in Moo Chan Song v4.5.7 allows attackers to cause a Denial of Service (DoS) via writing files to the in... |
| CVE-2025-36033 | MEDIUM | 5.4 | 0.1% | Feb 3, 2026 | IBM Engineering Lifecycle Management - Global Configuration Management 7.0.3 through 7.0.3 Interim Fix 017, and 7.1.0 th... |
| CVE-2025-33081 | MEDIUM | 5.5 | 0.1% | Feb 3, 2026 | IBM Concert 1.0.0 through 2.1.0 stores potentially sensitive information in log files that could be read by a local user... |
| CVE-2025-65081 | MEDIUM | 6.9 | 0.5% | Feb 3, 2026 | An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This v... |
| CVE-2025-65080 | MEDIUM | 6.9 | 0.5% | Feb 3, 2026 | A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulner... |
| CVE-2025-65079 | MEDIUM | 6.9 | 0.5% | Feb 3, 2026 | A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices.... |
| CVE-2025-64098 | MEDIUM | 5.9 | 0.4% | Feb 3, 2026 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). ... |
| CVE-2025-52633 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | HCL AION is affected by a Permanent Cookie Containing Sensitive Session Information vulnerability. It is storing sensiti... |
| CVE-2025-52623 | MEDIUM | 6.5 | 0.2% | Feb 3, 2026 | HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability. This can allow au... |
| CVE-2025-71179 | MEDIUM | 6.1 | 0.2% | Feb 3, 2026 | Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the search parameter to t... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now