2025 CVE Vulnerabilities
45,378 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-23597 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sabareesha Rio Pho... |
| CVE-2025-23592 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in animexxx dForms df... |
| CVE-2025-23589 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in markugwuanyi Conte... |
| CVE-2025-23583 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Explara Explara Me... |
| CVE-2025-23578 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Custom ... |
| CVE-2025-23548 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bilal TAS Responsi... |
| CVE-2025-23535 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in martin_ziegert REA... |
| CVE-2025-23512 | HIGH | 7.5 | 0.6% | Jan 22, 2025 | Missing Authorization vulnerability in 118group Team 118GROUP Agent team-118group-agent allows Exploiting Incorrectly Co... |
| CVE-2025-23509 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in siteheart HyperCom... |
| CVE-2025-23507 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blrt Blrt WP Embed... |
| CVE-2025-23506 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imsoftware WP IMAP... |
| CVE-2025-23503 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in osolwordpress Cust... |
| CVE-2025-23500 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in faaiq Simple Custo... |
| CVE-2025-23498 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ContentLocalized T... |
| CVE-2025-23495 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chetan Khandla Woo... |
| CVE-2025-23475 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fireantology Histo... |
| CVE-2025-23462 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anil Jailta FWD Sl... |
| CVE-2025-23449 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in davidpuc Simple sh... |
| CVE-2025-22772 | HIGH | 7.1 | 0.4% | Jan 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stephanemartinw Ma... |
| CVE-2025-0429 | HIGH | 7.2 | 0.6% | Jan 22, 2025 | The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and inclu... |
| CVE-2025-0428 | HIGH | 7.2 | 0.6% | Jan 22, 2025 | The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and inclu... |
| CVE-2025-22450 | HIGH | 7.5 | 0.4% | Jan 22, 2025 | Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. A remote attacker may di... |
| CVE-2025-20617 | HIGH | 7.2 | 1.1% | Jan 22, 2025 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmwa... |
| CVE-2025-23083 | HIGH | 7.7 | 0.4% | Jan 22, 2025 | With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This i... |
| CVE-2025-23196 | HIGH | 8.8 | 1.2% | Jan 21, 2025 | A code injection vulnerability exists in the Ambari Alert Definition feature, allowing authenticated users to inject an... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now