2025 CVE Vulnerabilities
45,374 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-39574 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UIUX Lab Uix Short... |
| CVE-2025-39573 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in teastudio.pl WP Po... |
| CVE-2025-39572 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Checkout... |
| CVE-2025-39571 | MEDIUM | 4.3 | 0.3% | Apr 16, 2025 | Missing Authorization vulnerability in WPXPO WowStore product-blocks allows Exploiting Incorrectly Configured Access Con... |
| CVE-2025-39564 | MEDIUM | 6.5 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in WP Trio Conditional Shipping for WooCommerce conditional-shipping-for... |
| CVE-2025-39563 | MEDIUM | 6.5 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in WP Trio Conditional Payments for WooCommerce conditional-payments-for... |
| CVE-2025-39560 | MEDIUM | 5.4 | 0.4% | Apr 16, 2025 | Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Con... |
| CVE-2025-39556 | MEDIUM | 5.3 | 0.4% | Apr 16, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in mediavine Mediavine Control ... |
| CVE-2025-39555 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church ... |
| CVE-2025-39552 | MEDIUM | 5.4 | 0.3% | Apr 16, 2025 | Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incor... |
| CVE-2025-39549 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in whiletrue Most And... |
| CVE-2025-39546 | MEDIUM | 4.3 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite all... |
| CVE-2025-39545 | MEDIUM | 5.4 | 0.4% | Apr 16, 2025 | Missing Authorization vulnerability in miniOrange WordPress REST API Authentication wp-rest-api-authentication allows Ex... |
| CVE-2025-39543 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Ele... |
| CVE-2025-39540 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rhys Wynne WP Flip... |
| CVE-2025-39538 | MEDIUM | 6.6 | 0.4% | Apr 16, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in Mathieu Chartier WP-Advanced-Search wp-advanced-search ... |
| CVE-2025-39531 | MEDIUM | 5.3 | 0.5% | Apr 16, 2025 | Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing... |
| CVE-2025-39529 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robin Cornett Scri... |
| CVE-2025-39528 | MEDIUM | 5.4 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rescue Themes Resc... |
| CVE-2025-39525 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Logo Carouse... |
| CVE-2025-39524 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in bPlugins Html5 Audio Play... |
| CVE-2025-39522 | MEDIUM | 5.4 | 0.4% | Apr 16, 2025 | Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Config... |
| CVE-2025-39520 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout F... |
| CVE-2025-39517 | MEDIUM | 4.3 | 0.2% | Apr 16, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in WP Map Plugins Basic Interactive World Map basic-interactive-world-ma... |
| CVE-2025-39516 | MEDIUM | 6.5 | 0.3% | Apr 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alan Petersen Auth... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now