2025 CVE Vulnerabilities

45,320 CVEs published in 2025.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2025-69319HIGH7.5Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-...
CVE-2025-69318HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak Job...
CVE-2025-69317HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scriptsbundle CarS...
CVE-2025-69316HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 TableOn...
CVE-2025-69314HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2025-69313HIGH7.5Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control...
CVE-2025-69311HIGH7.6Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured ...
CVE-2025-69293HIGH8.8Incorrect Privilege Assignment vulnerability in e-plugins Final User final-user allows Privilege Escalation.This issue a...
CVE-2025-69292HIGH8.8Incorrect Privilege Assignment vulnerability in e-plugins WP Membership wp-membership allows Privilege Escalation.This i...
CVE-2025-69193HIGH7.3Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Ac...
CVE-2025-69192HIGH7.3Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting Incorrectly Configure...
CVE-2025-69191HIGH7.3Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access C...
CVE-2025-69190HIGH7.3Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Configured Access Contr...
CVE-2025-69188HIGH7.3Missing Authorization vulnerability in e-plugins fitness-trainer fitness-trainer allows Exploiting Incorrectly Configure...
CVE-2025-69187HIGH7.3Missing Authorization vulnerability in e-plugins Final User final-user allows Exploiting Incorrectly Configured Access C...
CVE-2025-69186HIGH7.3Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting I...
CVE-2025-69185HIGH7.3Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Ac...
CVE-2025-69184HIGH7.3Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorre...
CVE-2025-69183HIGH8.8Incorrect Privilege Assignment vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Pri...
CVE-2025-69182HIGH8.8Incorrect Privilege Assignment vulnerability in e-plugins Institutions Directory institutions-directory allows Privilege...
CVE-2025-69181HIGH7.3Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configu...
CVE-2025-69180HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in themepassion Ultra...
CVE-2025-69102HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Boopathi Rajan WP ...
CVE-2025-69100HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2025-69099HIGH8.8Deserialization of Untrusted Data vulnerability in fuelthemes North north-wp allows Object Injection.This issue affects ...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now