2025 CVE Vulnerabilities

45,206 CVEs published in 2025.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2025-25124HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devu Status Update...
CVE-2025-25122HIGH8.1Path Traversal: '.../...//' vulnerability in hashshop WizShop wizshop allows Path Traversal.This issue affects WizShop: ...
CVE-2025-25121HIGH7.1Cross-Site Request Forgery (CSRF) vulnerability in shyammakwana Theme Options Z theme-options-z allows Cross Site Reques...
CVE-2025-25119HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alejandro Aranda W...
CVE-2025-25118HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Danish Ali Malik T...
CVE-2025-25114HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ehabstar User Role...
CVE-2025-25113HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Senktec Implied Co...
CVE-2025-25112HIGH7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kareemsultan Socia...
CVE-2025-25109HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2025-25108HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shalomworld SW Plu...
CVE-2025-25102HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Harrison Yaho...
CVE-2025-25099HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in accreteinfosolutio...
CVE-2025-25092HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gtlwpdev All push ...
CVE-2025-25090HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dreamstime Dreamst...
CVE-2025-25089HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in appten Image Rotat...
CVE-2025-25087HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim seekXL Snapr s...
CVE-2025-25083HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dave Lavoie EP4 Mo...
CVE-2025-25070HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ed atrero Album Re...
CVE-2025-24758HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolut...
CVE-2025-24694HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolut...
CVE-2025-23956HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Richard Leishman W...
CVE-2025-23945HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2025-23904HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rebrandpress Rebra...
CVE-2025-23903HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woofx Local Shippi...
CVE-2025-23883HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in unalignedcoder Str...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now