2025 CVE Vulnerabilities
45,206 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-30868 | HIGH | 7.5 | 1.0% | Mar 27, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-30857 | HIGH | 7.1 | 0.2% | Mar 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in PressMaximum Currency Switcher for WooCommerce currency-switcher-for-... |
| CVE-2025-30846 | HIGH | 8.8 | 0.7% | Mar 27, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-30845 | HIGH | 7.5 | 1.0% | Mar 27, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-30843 | HIGH | 7.6 | 0.5% | Mar 27, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in setriosoft bizcale... |
| CVE-2025-30831 | HIGH | 7.5 | 1.0% | Mar 27, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-30829 | HIGH | 7.5 | 1.0% | Mar 27, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-30820 | HIGH | 7.5 | 1.0% | Mar 27, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-30819 | HIGH | 8.5 | 0.4% | Mar 27, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Igor Benic Simple ... |
| CVE-2025-30814 | HIGH | 7.5 | 1.0% | Mar 27, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-30810 | HIGH | 8.5 | 0.4% | Mar 27, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smackcoders Inc., ... |
| CVE-2025-30806 | HIGH | 8.5 | 0.4% | Mar 27, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Constantin Boiangi... |
| CVE-2025-30791 | HIGH | 7.6 | 0.6% | Mar 27, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdever Cart track... |
| CVE-2025-30788 | HIGH | 8.2 | 0.2% | Mar 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allow... |
| CVE-2025-30787 | HIGH | 7.1 | 0.2% | Mar 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allow... |
| CVE-2025-30785 | HIGH | 7.5 | 0.9% | Mar 27, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-30784 | HIGH | 8.5 | 0.4% | Mar 27, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Shuffle WP Subs... |
| CVE-2025-30783 | HIGH | 8.2 | 0.2% | Mar 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allo... |
| CVE-2025-30775 | HIGH | 8.5 | 0.4% | Mar 27, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Private... |
| CVE-2025-30773 | HIGH | 7.2 | 0.7% | Mar 27, 2025 | Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object I... |
| CVE-2025-30772 | HIGH | 8.8 | 0.6% | Mar 27, 2025 | Missing Authorization vulnerability in WPClever WPC Smart Upsell Funnel for WooCommerce wpc-smart-upsell-funnel allows P... |
| CVE-2025-30769 | HIGH | 7.1 | 0.2% | Mar 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in alexvtn WIP WooCarousel Lite wip-woocarousel-lite allows Stored XSS.T... |
| CVE-2025-30765 | HIGH | 7.6 | 0.6% | Mar 27, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPPOOL FlexStock s... |
| CVE-2025-30355 | HIGH | 7.5 | 1.2% | Mar 27, 2025 | Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, pr... |
| CVE-2025-2837 | HIGH | 8.8 | 0.5% | Mar 26, 2025 | Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulner... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now