2025 CVE Vulnerabilities
45,206 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-26536 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yendif Player Anot... |
| CVE-2025-25134 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zenverse Theme Dem... |
| CVE-2025-24690 | HIGH | 8.1 | 0.9% | Mar 26, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-23964 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ajitae Google Plus... |
| CVE-2025-23952 | HIGH | 8.1 | 1.0% | Mar 26, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-23937 | HIGH | 8.1 | 1.0% | Mar 26, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-23735 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cosmin Schiopu Inf... |
| CVE-2025-23728 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in atelierhyper AuMen... |
| CVE-2025-23714 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in podspod AppReview ... |
| CVE-2025-23704 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Reuven Karasik You... |
| CVE-2025-23680 | HIGH | 7.1 | 0.4% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Narnoo Narnoo Oper... |
| CVE-2025-23666 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cxc-sawa Managemen... |
| CVE-2025-23638 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Umesh Ghimire Fron... |
| CVE-2025-23633 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in khanhtruong WP Dat... |
| CVE-2025-23632 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rhizome Networks C... |
| CVE-2025-23612 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixobe Pixobe Cart... |
| CVE-2025-23546 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robert D Payne RDP... |
| CVE-2025-23543 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fomopay FOMO Pay C... |
| CVE-2025-23542 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robert D Payne RDP... |
| CVE-2025-23466 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsiteeditor Site ... |
| CVE-2025-23460 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rhizomaticweb RWS ... |
| CVE-2025-23459 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NsThemes NS Simple... |
| CVE-2025-22283 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Riyaz GetSocial ge... |
| CVE-2025-2110 | HIGH | 8.8 | 0.4% | Mar 26, 2025 | The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to unauthorized access, mo... |
| CVE-2025-1913 | HIGH | 7.2 | 0.8% | Mar 26, 2025 | The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to PHP Ob... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now