2025 CVE Vulnerabilities
45,223 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-31589 | MEDIUM | 6.5 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kibru Demeke Ethio... |
| CVE-2025-31588 | MEDIUM | 5.4 | 0.1% | Mar 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider al... |
| CVE-2025-31587 | MEDIUM | 5.9 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elfsight Elfsight ... |
| CVE-2025-31586 | MEDIUM | 6.5 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Gallery –... |
| CVE-2025-31584 | MEDIUM | 5.4 | 0.3% | Mar 31, 2025 | Missing Authorization vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Exploit... |
| CVE-2025-31577 | MEDIUM | 6.6 | 0.3% | Mar 31, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in appointify Appointify appointify allows Upload a Web Sh... |
| CVE-2025-31576 | MEDIUM | 4.3 | 0.2% | Mar 31, 2025 | Missing Authorization vulnerability in Gagan Deep Singh PostmarkApp Email Integrator postmarkapp-email-integrator allows... |
| CVE-2025-31575 | MEDIUM | 5.9 | 0.2% | Mar 31, 2025 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Vasilis Triantafyllou Fla... |
| CVE-2025-31574 | MEDIUM | 6.5 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SoftHopper Custom ... |
| CVE-2025-31572 | MEDIUM | 4.3 | 0.1% | Mar 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in v20202020 Multi Days Events and Multi Events in One Day Calendar drag... |
| CVE-2025-31567 | MEDIUM | 6.5 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat themesf... |
| CVE-2025-31562 | MEDIUM | 6.5 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aphotrax Uptime Ro... |
| CVE-2025-31559 | MEDIUM | 6.5 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Caspio Bridge Cust... |
| CVE-2025-31557 | MEDIUM | 6.5 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MiKa OSM osm allow... |
| CVE-2025-31556 | MEDIUM | 6.5 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress... |
| CVE-2025-31555 | MEDIUM | 5.4 | 0.3% | Mar 31, 2025 | Missing Authorization vulnerability in ContentMX ContentMX Content Publisher contentmx-content-publisher allows Exploiti... |
| CVE-2025-31549 | MEDIUM | 6.5 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Agency Dominion In... |
| CVE-2025-31546 | MEDIUM | 4.3 | 0.3% | Mar 31, 2025 | Missing Authorization vulnerability in WP Messiah Swiss Toolkit For WP swiss-toolkit-for-wp allows Exploiting Incorrectl... |
| CVE-2025-31545 | MEDIUM | 5.4 | 0.3% | Mar 31, 2025 | Missing Authorization vulnerability in WP Messiah Safe Ai Malware Protection for WP safe-ai-malware-protection-for-wp al... |
| CVE-2025-31544 | MEDIUM | 4.3 | 0.3% | Mar 31, 2025 | Missing Authorization vulnerability in WP Messiah Swiss Toolkit For WP swiss-toolkit-for-wp allows Exploiting Incorrectl... |
| CVE-2025-31543 | MEDIUM | 6.5 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Twice Commerce Twi... |
| CVE-2025-31540 | MEDIUM | 4.3 | 0.3% | Mar 31, 2025 | Missing Authorization vulnerability in acmemediakits ACME Divi Modules acme-divi-modules allows Exploiting Incorrectly C... |
| CVE-2025-31539 | MEDIUM | 6.5 | 0.3% | Mar 31, 2025 | Missing Authorization vulnerability in Blocksera Cryptocurrency Widgets Pack cryptocurrency-widgets-pack allows Exploiti... |
| CVE-2025-31538 | MEDIUM | 6.5 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in checklistcom Check... |
| CVE-2025-31535 | MEDIUM | 6.5 | 0.2% | Mar 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PressTigers Simple... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now