2025 CVE Vulnerabilities
45,364 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-28865 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lionelroux WP Colo... |
| CVE-2025-28858 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arrow Plugins Arro... |
| CVE-2025-28855 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in srcoley Teleport t... |
| CVE-2025-27267 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in srcoley Random Quo... |
| CVE-2025-27015 | HIGH | 7.5 | 0.9% | Mar 26, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-27014 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designingmedia Hos... |
| CVE-2025-26986 | HIGH | 8.1 | 1.0% | Mar 26, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-26584 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Travis Ballard TBT... |
| CVE-2025-26583 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Video... |
| CVE-2025-26581 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Pictu... |
| CVE-2025-26579 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Micro... |
| CVE-2025-26576 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in takumin WP Simple ... |
| CVE-2025-26575 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Maurer Displa... |
| CVE-2025-26573 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JamRizzi Technolog... |
| CVE-2025-26566 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Frank In Stock Mai... |
| CVE-2025-26565 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUPress gnu... |
| CVE-2025-26564 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUCommerce ... |
| CVE-2025-26560 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KKWangen WP Contac... |
| CVE-2025-26546 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelpro Cookies P... |
| CVE-2025-26544 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Max K UTM tags tra... |
| CVE-2025-26542 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dang Ngoc Binh Zal... |
| CVE-2025-26541 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeSolz Bitcoin /... |
| CVE-2025-26536 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yendif Player Anot... |
| CVE-2025-25134 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zenverse Theme Dem... |
| CVE-2025-24690 | HIGH | 8.1 | 0.9% | Mar 26, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now