2025 CVE Vulnerabilities
45,138 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-13859 | MEDIUM | 6.4 | 0.2% | Jan 15, 2026 | The AffiliateX – Amazon Affiliate Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to ... |
| CVE-2025-12895 | MEDIUM | 5.3 | 0.2% | Jan 15, 2026 | The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthorized email sending du... |
| CVE-2025-14448 | MEDIUM | 5.4 | 0.2% | Jan 15, 2026 | The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Multiple Chec... |
| CVE-2025-13454 | MEDIUM | 6.8 | 0.1% | Jan 14, 2026 | A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user t... |
| CVE-2025-13453 | MEDIUM | 5.1 | 0.1% | Jan 14, 2026 | A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read... |
| CVE-2025-13154 | MEDIUM | 6.8 | 0.1% | Jan 14, 2026 | An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow a... |
| CVE-2025-71166 | MEDIUM | 5.4 | 0.2% | Jan 14, 2026 | Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the admi... |
| CVE-2025-71165 | MEDIUM | 5.4 | 0.2% | Jan 14, 2026 | Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the admi... |
| CVE-2025-71164 | MEDIUM | 5.4 | 0.2% | Jan 14, 2026 | Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the Edit... |
| CVE-2025-14557 | MEDIUM | 4.8 | 0.2% | Jan 14, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Face... |
| CVE-2025-14556 | MEDIUM | 5.4 | 0.2% | Jan 14, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Flag... |
| CVE-2025-11224 | MEDIUM | 5.4 | 0.3% | Jan 14, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.3.6, 18.4 before 18.4.4, and ... |
| CVE-2025-65397 | MEDIUM | 6.8 | 0.3% | Jan 14, 2026 | An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929 ... |
| CVE-2025-63644 | MEDIUM | 5.4 | 0.3% | Jan 14, 2026 | A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile... |
| CVE-2025-67835 | MEDIUM | 6.5 | 0.3% | Jan 14, 2026 | Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notifi... |
| CVE-2025-67834 | MEDIUM | 5.4 | 0.2% | Jan 14, 2026 | Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter. |
| CVE-2025-67833 | MEDIUM | 6.1 | 0.2% | Jan 14, 2026 | Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter. |
| CVE-2025-65396 | MEDIUM | 6.1 | 0.2% | Jan 14, 2026 | A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically prox... |
| CVE-2025-37185 | MEDIUM | 4.8 | 0.2% | Jan 14, 2026 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re... |
| CVE-2025-67399 | MEDIUM | 4.6 | 0.2% | Jan 14, 2026 | An issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate attacker to obtain sensitive i... |
| CVE-2025-14242 | MEDIUM | 6.5 | 0.7% | Jan 14, 2026 | A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer overflow in the ls comman... |
| CVE-2025-71144 | MEDIUM | 5.5 | 0.1% | Jan 14, 2026 | In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure context reset on disconnect() After ... |
| CVE-2025-71142 | MEDIUM | 5.5 | 0.1% | Jan 14, 2026 | In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition... |
| CVE-2025-71141 | MEDIUM | 5.5 | 0.1% | Jan 14, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed p... |
| CVE-2025-71139 | MEDIUM | 5.5 | 0.1% | Jan 14, 2026 | In the Linux kernel, the following vulnerability has been resolved: kernel/kexec: fix IMA when allocation happens in CM... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now