2025 CVE Vulnerabilities
45,221 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-31877 | MEDIUM | 4.3 | 0.2% | Apr 1, 2025 | Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Acces... |
| CVE-2025-31875 | MEDIUM | 6.5 | 0.2% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluginic FancyPost... |
| CVE-2025-31874 | MEDIUM | 6.5 | 0.2% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay WebberZone Sn... |
| CVE-2025-31873 | MEDIUM | 6.5 | 0.2% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sheetdb SheetDB sh... |
| CVE-2025-31872 | MEDIUM | 5.3 | 0.3% | Apr 1, 2025 | Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting I... |
| CVE-2025-31871 | MEDIUM | 4.7 | 0.3% | Apr 1, 2025 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any... |
| CVE-2025-31870 | MEDIUM | 5.4 | 0.3% | Apr 1, 2025 | Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Exploiting Incorrectl... |
| CVE-2025-31869 | MEDIUM | 6.5 | 0.2% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Modernaweb Studio ... |
| CVE-2025-31868 | MEDIUM | 5.3 | 0.3% | Apr 1, 2025 | Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Co... |
| CVE-2025-31867 | MEDIUM | 5.4 | 0.3% | Apr 1, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incor... |
| CVE-2025-31866 | MEDIUM | 4.3 | 0.3% | Apr 1, 2025 | Missing Authorization vulnerability in Ship Depot ShipDepot for WooCommerce ship-depot allows Exploiting Incorrectly Con... |
| CVE-2025-31865 | MEDIUM | 4.3 | 0.3% | Apr 1, 2025 | Missing Authorization vulnerability in CartBoss CartBoss cartboss allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2025-31864 | MEDIUM | 5.9 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Out the Box Beam m... |
| CVE-2025-31863 | MEDIUM | 5.3 | 0.3% | Apr 1, 2025 | Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Exploiting Incorrectly Configured Acc... |
| CVE-2025-31862 | MEDIUM | 5.3 | 0.3% | Apr 1, 2025 | Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Con... |
| CVE-2025-31861 | MEDIUM | 6.5 | 0.2% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPOrbit Support Pe... |
| CVE-2025-31860 | MEDIUM | 6.5 | 0.2% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPeka WP AdCenter ... |
| CVE-2025-31859 | MEDIUM | 5.4 | 0.1% | Apr 1, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Feedbucket Feedbucket – Website Feedback Tool feedbucket allows Cross... |
| CVE-2025-31857 | MEDIUM | 6.5 | 0.2% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Directorist ... |
| CVE-2025-31856 | MEDIUM | 4.3 | 0.3% | Apr 1, 2025 | Missing Authorization vulnerability in brainvireinfo Export All Post Meta export-all-post-meta allows Accessing Function... |
| CVE-2025-31855 | MEDIUM | 6.5 | 0.2% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in softnwords SMM API... |
| CVE-2025-31854 | MEDIUM | 4.3 | 0.3% | Apr 1, 2025 | Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce sticky-add-to-cart-woo al... |
| CVE-2025-31853 | MEDIUM | 5.9 | 0.2% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Erez Hadas-Sonnens... |
| CVE-2025-31852 | MEDIUM | 4.3 | 0.2% | Apr 1, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in N-Media Bulk Product Sync sync-wc-google allows Cross Site Request Fo... |
| CVE-2025-31851 | MEDIUM | 6.5 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in markkinchin Beds24... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now