2025 CVE Vulnerabilities
45,206 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-23948 | HIGH | 8.1 | 0.9% | Jan 22, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-23944 | HIGH | 8.8 | 0.7% | Jan 22, 2025 | Deserialization of Untrusted Data vulnerability in bulktheme WOOEXIM wooexim allows Object Injection.This issue affects ... |
| CVE-2025-23938 | HIGH | 7.5 | 0.8% | Jan 22, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-23910 | HIGH | 8.5 | 0.5% | Jan 22, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in keighl Menus Plus+... |
| CVE-2025-23882 | HIGH | 7.1 | 0.3% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in misanthrop WP Down... |
| CVE-2025-23874 | HIGH | 7.1 | 0.3% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FalconTheme Team W... |
| CVE-2025-23867 | HIGH | 7.1 | 0.3% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in markcoker WordPres... |
| CVE-2025-23866 | HIGH | 7.1 | 0.3% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E. Marten EU DSGVO... |
| CVE-2025-23846 | HIGH | 7.1 | 0.3% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thaikolja Flexible... |
| CVE-2025-23812 | HIGH | 7.1 | 0.3% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Jeffrey Cont... |
| CVE-2025-23811 | HIGH | 7.1 | 0.3% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ghasemy14 WP2APP w... |
| CVE-2025-23806 | HIGH | 7.1 | 0.2% | Jan 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeFarmer Ultimate Subscribe ultimate-subscribe allows Reflected XS... |
| CVE-2025-23803 | HIGH | 7.1 | 0.2% | Jan 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Rik Schennink Snippy snippy allows Reflected XSS.This issue affects S... |
| CVE-2025-23784 | HIGH | 7.6 | 0.4% | Jan 22, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Jeffrey Cont... |
| CVE-2025-23781 | HIGH | 7.5 | 0.6% | Jan 22, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in Web Mumbai WM Options Import Export wm-options-import... |
| CVE-2025-23774 | HIGH | 7.5 | 0.4% | Jan 22, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in Niket Joshi WPDB to Sql wpdb-to-sql allows Retrieve E... |
| CVE-2025-23770 | HIGH | 7.1 | 0.3% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Caspie Fast Tube f... |
| CVE-2025-23769 | HIGH | 7.1 | 0.3% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dreamsofmatter Con... |
| CVE-2025-23768 | HIGH | 7.1 | 0.3% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in inwavethemes InFun... |
| CVE-2025-23758 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pootlepress Pootle... |
| CVE-2025-23746 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Edem CMC MIGRATE c... |
| CVE-2025-23732 | HIGH | 7.1 | 0.3% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in franciscopalacios ... |
| CVE-2025-23709 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kiroro Formatted p... |
| CVE-2025-23706 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in milordk Jet Skinne... |
| CVE-2025-23701 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in limesquare Lime De... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now