2025 CVE Vulnerabilities
45,207 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-3475 | MEDIUM | 6.5 | 0.4% | Apr 9, 2025 | Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Exces... |
| CVE-2025-3474 | MEDIUM | 6.5 | 0.3% | Apr 9, 2025 | Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Acc... |
| CVE-2025-3131 | MEDIUM | 5.4 | 0.1% | Apr 9, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal ECA: Event - Condition - Action allows Cross Site Request Forg... |
| CVE-2025-32694 | MEDIUM | 4.7 | 0.3% | Apr 9, 2025 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows... |
| CVE-2025-32693 | MEDIUM | 4.7 | 0.3% | Apr 9, 2025 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allow... |
| CVE-2025-32691 | MEDIUM | 4.9 | 0.2% | Apr 9, 2025 | Server-Side Request Forgery (SSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows Server Side Request ... |
| CVE-2025-32690 | MEDIUM | 6.5 | 0.2% | Apr 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blubrry PowerPress... |
| CVE-2025-32684 | MEDIUM | 5 | 0.3% | Apr 9, 2025 | Missing Authorization vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectl... |
| CVE-2025-32683 | MEDIUM | 6.5 | 0.2% | Apr 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG m... |
| CVE-2025-32680 | MEDIUM | 5.9 | 0.2% | Apr 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Grade Us, Inc. Rev... |
| CVE-2025-32679 | MEDIUM | 5.4 | 0.2% | Apr 9, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in ZealousWeb User Registration Using Contact Form 7 user-registration-u... |
| CVE-2025-32678 | MEDIUM | 4.3 | 0.2% | Apr 9, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Show Stats wp-show-stats allows Cross Site Request Fo... |
| CVE-2025-32675 | MEDIUM | 6.8 | 0.4% | Apr 9, 2025 | Server-Side Request Forgery (SSRF) vulnerability in QuantumCloud SEO Help seo-help allows Server Side Request Forgery.Th... |
| CVE-2025-32640 | MEDIUM | 5.9 | 0.3% | Apr 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Ally poj... |
| CVE-2025-32499 | MEDIUM | 6.5 | 0.6% | Apr 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-32495 | MEDIUM | 6.5 | 0.3% | Apr 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Waymark waymar... |
| CVE-2025-32494 | MEDIUM | 4.3 | 0.2% | Apr 9, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in bozdoz reCAPTCHA Jetpack recaptcha-jetpack allows Cross Site Request ... |
| CVE-2025-32493 | MEDIUM | 5.9 | 0.3% | Apr 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes BP Soci... |
| CVE-2025-32492 | MEDIUM | 5.9 | 0.3% | Apr 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eliot Akira Admin ... |
| CVE-2025-32489 | MEDIUM | 5.9 | 0.3% | Apr 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Wetterwarner w... |
| CVE-2025-32488 | MEDIUM | 5.9 | 0.3% | Apr 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in آریا وردپرس Aria F... |
| CVE-2025-32487 | MEDIUM | 4.9 | 0.2% | Apr 9, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Joe Waymark waymark allows Server Side Request Forgery.This issue af... |
| CVE-2025-32485 | MEDIUM | 4.3 | 0.2% | Apr 9, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Bjoern WP Performance Pack wp-performance-pack allows Cross Site Requ... |
| CVE-2025-32483 | MEDIUM | 5.9 | 0.3% | Apr 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Salisbury Re... |
| CVE-2025-31042 | MEDIUM | 5.3 | 0.4% | Apr 9, 2025 | Missing Authorization vulnerability in rtakao Sandwich Adsense firsth3tagadsense allows Exploiting Incorrectly Configure... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now