2025 CVE Vulnerabilities
45,209 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-22520 | HIGH | 7.1 | 0.2% | Jan 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Tock Tock Widget tock-widget allows Cross Site Request Forgery.This i... |
| CVE-2025-22519 | HIGH | 8.5 | 0.4% | Jan 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jerodmoore eDoc Ea... |
| CVE-2025-22507 | HIGH | 7.6 | 0.6% | Jan 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in iDo8p WPMU Prefill... |
| CVE-2025-22502 | HIGH | 7.6 | 0.6% | Jan 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mindvalley MindVal... |
| CVE-2025-22338 | HIGH | 7.1 | 0.4% | Jan 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lich_wang WP-tagMa... |
| CVE-2025-22335 | HIGH | 7.1 | 0.4% | Jan 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rajib.dewan Openca... |
| CVE-2025-22294 | HIGH | 7.1 | 0.4% | Jan 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theme funda Custom... |
| CVE-2025-21623 | HIGH | 7.5 | 1.1% | Jan 7, 2025 | ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 238, ClipBucket V5 allows unauthenticated at... |
| CVE-2025-0241 | HIGH | 7.7 | 0.7% | Jan 7, 2025 | When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. Th... |
| CVE-2025-0294 | HIGH | 8.8 | 0.7% | Jan 7, 2025 | A vulnerability has been found in SourceCodester Home Clean Services Management System 1.0 and classified as critical. A... |
| CVE-2025-22364 | HIGH | 7.5 | 0.6% | Jan 7, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-22359 | HIGH | 7.1 | 0.3% | Jan 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pjfc SyncFields sy... |
| CVE-2025-22358 | HIGH | 7.1 | 0.2% | Jan 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simone Marcon Wp a... |
| CVE-2025-22357 | HIGH | 7.1 | 0.2% | Jan 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdever Target Not... |
| CVE-2025-22355 | HIGH | 7.1 | 0.2% | Jan 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in asokaaso2 Kikx Sim... |
| CVE-2025-22353 | HIGH | 7.1 | 0.2% | Jan 7, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bvads BVD Easy Gal... |
| CVE-2025-22352 | HIGH | 7.6 | 0.7% | Jan 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX ... |
| CVE-2025-22351 | HIGH | 7.6 | 0.5% | Jan 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in penguinarts Contac... |
| CVE-2025-22349 | HIGH | 7.6 | 0.5% | Jan 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Marka WordPress... |
| CVE-2025-22348 | HIGH | 8.5 | 0.4% | Jan 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rtowebsites Dynami... |
| CVE-2025-22347 | HIGH | 8.2 | 0.2% | Jan 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Blind... |
| CVE-2025-22343 | HIGH | 7.1 | 0.1% | Jan 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in koter84 wpSOL wpsol allows Stored XSS.This issue affects wpSOL: from ... |
| CVE-2025-22342 | HIGH | 7.1 | 0.1% | Jan 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Jenst WP Simple Sitemap wp-simple-sitemap allows Stored XSS.This issu... |
| CVE-2025-22336 | HIGH | 7.1 | 0.1% | Jan 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Amos Lee（一刀） Wizhi Multi Filters by Wenprise wizhi-multi-filters allo... |
| CVE-2025-22328 | HIGH | 7.1 | 0.1% | Jan 7, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Elevio by Dixa Elevio elevio allows Stored XSS.This issue affects Ele... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now