2025 CVE Vulnerabilities

45,138 CVEs published in 2025.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2025-69318HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak Job...
CVE-2025-69317HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scriptsbundle CarS...
CVE-2025-69316HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 TableOn...
CVE-2025-69314HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2025-69313HIGH7.5Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control...
CVE-2025-69311HIGH7.6Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured ...
CVE-2025-69293HIGH8.8Incorrect Privilege Assignment vulnerability in e-plugins Final User final-user allows Privilege Escalation.This issue a...
CVE-2025-69292HIGH8.8Incorrect Privilege Assignment vulnerability in e-plugins WP Membership wp-membership allows Privilege Escalation.This i...
CVE-2025-69193HIGH7.3Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Ac...
CVE-2025-69192HIGH7.3Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting Incorrectly Configure...
CVE-2025-69191HIGH7.3Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access C...
CVE-2025-69190HIGH7.3Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Configured Access Contr...
CVE-2025-69188HIGH7.3Missing Authorization vulnerability in e-plugins fitness-trainer fitness-trainer allows Exploiting Incorrectly Configure...
CVE-2025-69187HIGH7.3Missing Authorization vulnerability in e-plugins Final User final-user allows Exploiting Incorrectly Configured Access C...
CVE-2025-69186HIGH7.3Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting I...
CVE-2025-69185HIGH7.3Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Ac...
CVE-2025-69184HIGH7.3Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorre...
CVE-2025-69183HIGH8.8Incorrect Privilege Assignment vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Pri...
CVE-2025-69182HIGH8.8Incorrect Privilege Assignment vulnerability in e-plugins Institutions Directory institutions-directory allows Privilege...
CVE-2025-69181HIGH7.3Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configu...
CVE-2025-69180HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in themepassion Ultra...
CVE-2025-69102HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Boopathi Rajan WP ...
CVE-2025-69100HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2025-69099HIGH8.8Deserialization of Untrusted Data vulnerability in fuelthemes North north-wp allows Object Injection.This issue affects ...
CVE-2025-69098HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWave Hide My WP ...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now