2025 CVE Vulnerabilities
45,223 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-58295 | MEDIUM | 5.5 | 0.1% | Oct 11, 2025 | Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may aff... |
| CVE-2025-58292 | MEDIUM | 5.5 | 0.1% | Oct 11, 2025 | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect av... |
| CVE-2025-58291 | MEDIUM | 5.5 | 0.1% | Oct 11, 2025 | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect av... |
| CVE-2025-58290 | MEDIUM | 5.5 | 0.1% | Oct 11, 2025 | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect av... |
| CVE-2025-58288 | MEDIUM | 5.5 | 0.1% | Oct 11, 2025 | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect av... |
| CVE-2025-58287 | MEDIUM | 5.5 | 0.1% | Oct 11, 2025 | Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect servi... |
| CVE-2025-58286 | MEDIUM | 5.5 | 0.1% | Oct 11, 2025 | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect av... |
| CVE-2025-11594 | MEDIUM | 5.5 | 0.3% | Oct 11, 2025 | A vulnerability has been found in ywxbear PHP-Bookstore-Website-Example and PHP Basic BookStore Website up to 0e0b9f542f... |
| CVE-2025-11518 | MEDIUM | 5.3 | 0.2% | Oct 11, 2025 | The WPC Smart Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all ver... |
| CVE-2025-11254 | MEDIUM | 4.3 | 0.3% | Oct 11, 2025 | The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to CSV Injection in ... |
| CVE-2025-11167 | MEDIUM | 4.7 | 0.2% | Oct 11, 2025 | The CM Registration – Tailored tool for seamless login and invitation-based registrations plugin for WordPress is vulner... |
| CVE-2025-9496 | MEDIUM | 6.4 | 0.2% | Oct 11, 2025 | The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file_modifie... |
| CVE-2025-9196 | MEDIUM | 5.3 | 1.0% | Oct 11, 2025 | The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to S... |
| CVE-2025-11533 | CRITICAL | 9.8 | 0.6% | Oct 11, 2025 | The WP Freeio plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.21. T... |
| CVE-2025-11197 | MEDIUM | 6.4 | 0.2% | Oct 11, 2025 | The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'drafts' shortcode in ... |
| CVE-2025-10185 | MEDIUM | 4.9 | 0.3% | Oct 11, 2025 | The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'orderb... |
| CVE-2025-10048 | MEDIUM | 4.9 | 0.3% | Oct 11, 2025 | The My auctions allegro plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up... |
| CVE-2025-11593 | HIGH | 8.8 | 0.3% | Oct 11, 2025 | A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin... |
| CVE-2025-11592 | HIGH | 8.8 | 0.3% | Oct 11, 2025 | A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edi... |
| CVE-2025-11591 | HIGH | 8.8 | 0.3% | Oct 11, 2025 | A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknow... |
| CVE-2025-58285 | MEDIUM | 5.5 | 0.1% | Oct 11, 2025 | Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service c... |
| CVE-2025-58284 | MEDIUM | 5.5 | 0.1% | Oct 11, 2025 | Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service... |
| CVE-2025-58283 | MEDIUM | 5.5 | 0.1% | Oct 11, 2025 | Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service c... |
| CVE-2025-58282 | MEDIUM | 5.5 | 0.1% | Oct 11, 2025 | Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service ... |
| CVE-2025-58278 | MEDIUM | 5.5 | 0.1% | Oct 11, 2025 | Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affec... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now