2025 CVE Vulnerabilities
45,221 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-31821 | MEDIUM | 4.7 | 0.4% | Apr 1, 2025 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in formsintegrations Integration of Zoho CRM and Conta... |
| CVE-2025-31820 | MEDIUM | 4.3 | 0.3% | Apr 1, 2025 | Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-fro... |
| CVE-2025-31818 | MEDIUM | 6.5 | 0.2% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ContentBot.ai Cont... |
| CVE-2025-31817 | MEDIUM | 6.5 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPWheels BlockWhee... |
| CVE-2025-31816 | MEDIUM | 5.4 | 0.4% | Apr 1, 2025 | Missing Authorization vulnerability in pietro Mobile App Canvas mobile-app allows Exploiting Incorrectly Configured Acce... |
| CVE-2025-31815 | MEDIUM | 6.5 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devscred Design Bl... |
| CVE-2025-31814 | MEDIUM | 4.3 | 0.2% | Apr 1, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in OwnerRez OwnerRez API ownerrez allows Cross Site Request Forgery.This... |
| CVE-2025-31813 | MEDIUM | 6.5 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Website366.com WPS... |
| CVE-2025-31812 | MEDIUM | 6.5 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomas BuddyPress M... |
| CVE-2025-31811 | MEDIUM | 6.5 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtreeme Planyo onl... |
| CVE-2025-31810 | MEDIUM | 5.3 | 0.4% | Apr 1, 2025 | Missing Authorization vulnerability in PickPlugins Question Answer question-answer allows Accessing Functionality Not Pr... |
| CVE-2025-31809 | MEDIUM | 4.3 | 0.2% | Apr 1, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Labinator Labinator Content Types Duplicator labinator-content-types-... |
| CVE-2025-31808 | MEDIUM | 4.3 | 0.2% | Apr 1, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in IT Path Solutions SCSS WP Editor scss-wp-editor allows Cross Site Req... |
| CVE-2025-31807 | MEDIUM | 4.3 | 0.2% | Apr 1, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in CloudRedux Product Notices for WooCommerce product-notices-for-woocom... |
| CVE-2025-31806 | MEDIUM | 5.9 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uSystems Webling w... |
| CVE-2025-31805 | MEDIUM | 6.5 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal Gutena ... |
| CVE-2025-31804 | MEDIUM | 6.5 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DraftPress Team Fo... |
| CVE-2025-31803 | MEDIUM | 6.5 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Neteuro Turisbook ... |
| CVE-2025-31802 | MEDIUM | 5.4 | 0.4% | Apr 1, 2025 | Missing Authorization vulnerability in Shiptimize Shiptimize for WooCommerce shiptimize-for-woocommerce allows Exploitin... |
| CVE-2025-31801 | MEDIUM | 6.5 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maksym Marko MX Ti... |
| CVE-2025-31799 | MEDIUM | 4.3 | 0.3% | Apr 1, 2025 | Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2025-31798 | MEDIUM | 4.3 | 0.3% | Apr 1, 2025 | Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2025-31797 | MEDIUM | 6.5 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Sprout Cl... |
| CVE-2025-31796 | MEDIUM | 5.4 | 0.3% | Apr 1, 2025 | Server-Side Request Forgery (SSRF) vulnerability in TheInnovs ElementsCSS Addons for Elementor css-for-elementor allows ... |
| CVE-2025-31793 | MEDIUM | 5.9 | 0.3% | Apr 1, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in piotnetdotcom Piot... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now