2025 CVE Vulnerabilities
45,378 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-22352 | HIGH | 7.6 | 0.7% | Jan 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX ... |
| CVE-2025-22351 | HIGH | 7.6 | 0.5% | Jan 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in penguinarts Contac... |
| CVE-2025-22349 | HIGH | 7.6 | 0.5% | Jan 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Marka WordPress... |
| CVE-2025-22348 | HIGH | 8.5 | 0.4% | Jan 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rtowebsites Dynami... |
| CVE-2025-22347 | HIGH | 8.2 | 0.2% | Jan 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Blind... |
| CVE-2025-22343 | HIGH | 7.1 | 0.1% | Jan 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in koter84 wpSOL wpsol allows Stored XSS.This issue affects wpSOL: from ... |
| CVE-2025-22342 | HIGH | 7.1 | 0.1% | Jan 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Jenst WP Simple Sitemap wp-simple-sitemap allows Stored XSS.This issu... |
| CVE-2025-22336 | HIGH | 7.1 | 0.1% | Jan 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Amos Lee（一刀） Wizhi Multi Filters by Wenprise wizhi-multi-filters allo... |
| CVE-2025-22328 | HIGH | 7.1 | 0.1% | Jan 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Elevio by Dixa Elevio elevio allows Stored XSS.This issue affects Ele... |
| CVE-2025-22326 | HIGH | 7.1 | 0.2% | Jan 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 5centsCDN 5centsCD... |
| CVE-2025-22325 | HIGH | 7.1 | 0.1% | Jan 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in nchankov Autocompleter autocompleter allows Stored XSS.This issue aff... |
| CVE-2025-22324 | HIGH | 7.1 | 0.2% | Jan 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andon Ivanov OZ Ca... |
| CVE-2025-22320 | HIGH | 7.1 | 0.2% | Jan 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProductDyno Produc... |
| CVE-2025-22303 | HIGH | 7.5 | 0.4% | Jan 7, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in brandtoss WP Mailster wp-mailster allows Retrieve Emb... |
| CVE-2025-22395 | HIGH | 7.8 | 0.2% | Jan 7, 2025 | Dell Update Package Framework, versions prior to 22.01.02, contain(s) a Local Privilege Escalation Vulnerability. A loca... |
| CVE-2025-21620 | HIGH | 7.5 | 0.5% | Jan 6, 2025 | Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. When you send a request with the Authori... |
| CVE-2025-21618 | HIGH | 7.5 | 0.4% | Jan 6, 2025 | NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for... |
| CVE-2025-21614 | HIGH | 7.5 | 0.7% | Jan 6, 2025 | go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was... |
| CVE-2025-21612 | HIGH | 8.6 | 0.5% | Jan 6, 2025 | TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Prior to 2.7.2, TabberTransclude.php doesn't es... |
| CVE-2025-21611 | HIGH | 8.8 | 0.5% | Jan 6, 2025 | tgstation-server is a production scale tool for BYOND server management. Prior to 6.12.3, roles used to authorize API me... |
| CVE-2025-0232 | HIGH | 8.8 | 0.5% | Jan 5, 2025 | A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. Affected by this issu... |
| CVE-2025-0231 | HIGH | 8.8 | 0.5% | Jan 5, 2025 | A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulner... |
| CVE-2025-0206 | HIGH | 8.8 | 0.6% | Jan 4, 2025 | A vulnerability classified as critical was found in code-projects Online Shoe Store 1.0. Affected by this vulnerability ... |
| CVE-2025-22390 | HIGH | 7.5 | 0.3% | Jan 4, 2025 | An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the C... |
| CVE-2025-22389 | HIGH | 8 | 0.5% | Jan 4, 2025 | An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the C... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now