2025 CVE Vulnerabilities

45,206 CVEs published in 2025.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2025-26885HIGH7.2Deserialization of Untrusted Data vulnerability in Beaver Builder WordPress Assistant assistant allows Object Injection....
CVE-2025-26879HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristián Lávaque s...
CVE-2025-26589HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristopher Dino IE...
CVE-2025-26588HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gabrielperezs TTT ...
CVE-2025-26587HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nghorta sidebarTab...
CVE-2025-26586HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in abelony Events Pla...
CVE-2025-26585HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DyadyaLesha DL Lea...
CVE-2025-26563HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muneeb Mobile rock...
CVE-2025-26557HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in viperchill ViperBa...
CVE-2025-26540HIGH7.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in helloprint Helloprint he...
CVE-2025-26534HIGH8.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in helloprint Helloprint he...
CVE-2025-25170HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DotsquaresLtd Migr...
CVE-2025-25169HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rachel Cherry Auth...
CVE-2025-25165HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in richardgabriel Sta...
CVE-2025-25164HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yuichiro ABE Meta ...
CVE-2025-25162HIGH7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in kutu62 Sports Rankings a...
CVE-2025-25161HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SocialEvolution WP...
CVE-2025-25158HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Antonio Sanchez Un...
CVE-2025-25157HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpchurchteam WP Ch...
CVE-2025-25142HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The Jake Group WP ...
CVE-2025-25133HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in newbiesup WP Front...
CVE-2025-25132HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ravi Singh Visitor...
CVE-2025-25130HIGH7.5Relative Path Traversal vulnerability in Shah Alom Delete Comments By Status delete-comments-by-status allows Path Trave...
CVE-2025-25129HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Callback ...
CVE-2025-25127HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rohitashv Singhal ...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now