2025 CVE Vulnerabilities
45,224 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-28914 | MEDIUM | 5.9 | 0.3% | Mar 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Sharma wordpr... |
| CVE-2025-28913 | MEDIUM | 4.3 | 0.2% | Mar 11, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Aftab Ali Muni WP Add Active Class To Menu Item wp-add-active-class-t... |
| CVE-2025-28912 | MEDIUM | 4.3 | 0.2% | Mar 11, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Muntasir Rahman Custom Dashboard Page custom-dashboard-page allows Cr... |
| CVE-2025-28910 | MEDIUM | 4.3 | 0.2% | Mar 11, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Ravinder Khurana WP Hide Admin Bar wp-hide-admin-bar allows Cross Sit... |
| CVE-2025-28909 | MEDIUM | 4.3 | 0.2% | Mar 11, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in edwardw WP No-Bot Question wp-no-bot-question allows Cross Site Reque... |
| CVE-2025-28908 | MEDIUM | 5.9 | 0.3% | Mar 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pipdig pipDisqus p... |
| CVE-2025-28907 | MEDIUM | 5.9 | 0.3% | Mar 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rahul Arora WP Las... |
| CVE-2025-28906 | MEDIUM | 5.9 | 0.5% | Mar 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thiago S.F. Skitte... |
| CVE-2025-28902 | MEDIUM | 4.3 | 0.2% | Mar 11, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Benjamin Pick Contact Form 7 Select Box Editor Button contact-form-7-... |
| CVE-2025-28896 | MEDIUM | 4.7 | 0.3% | Mar 11, 2025 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Akshar Soft Solutions AS English Admin as-english-a... |
| CVE-2025-28887 | MEDIUM | 4.3 | 0.2% | Mar 11, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Fastmover Plugins Last Updated Column plugins-last-updated-column all... |
| CVE-2025-28886 | MEDIUM | 4.3 | 0.2% | Mar 11, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in xjb REST API TO MiniProgram rest-api-to-miniprogram allows Cross Site... |
| CVE-2025-28884 | MEDIUM | 4.3 | 0.2% | Mar 11, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Rajesh Kumar WP Bulk Post Duplicator wp-bulk-post-duplicator allows C... |
| CVE-2025-28881 | MEDIUM | 4.3 | 0.2% | Mar 11, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in mg12 Mobile Themes wp-mobile-themes allows Cross Site Request Forgery... |
| CVE-2025-28879 | MEDIUM | 5.4 | 0.2% | Mar 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aumsrini Bee Layer... |
| CVE-2025-28878 | MEDIUM | 4.8 | 0.3% | Mar 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Will Brubaker Awes... |
| CVE-2025-28875 | MEDIUM | 4.8 | 0.3% | Mar 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shanebp BP Email A... |
| CVE-2025-28874 | MEDIUM | 4.9 | 0.4% | Mar 11, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in shanebp BP Email Assign Templates bp-email-assign-temp... |
| CVE-2025-28871 | MEDIUM | 4.8 | 0.3% | Mar 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jwpegram Block Spa... |
| CVE-2025-28870 | MEDIUM | 5.4 | 0.2% | Mar 11, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in amocrm amoCRM WebF... |
| CVE-2025-28861 | MEDIUM | 6.1 | 0.1% | Mar 11, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in bhzad WP jQuery Persian Datepicker wpjqp-datepicker allows Stored XSS... |
| CVE-2025-28860 | MEDIUM | 6.1 | 0.1% | Mar 11, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in PPDPurveyor Google News Editors Picks Feed Generator google-news-edit... |
| CVE-2025-28857 | MEDIUM | 6.1 | 0.1% | Mar 11, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in rankchecker Rankchecker.io Integration rankchecker-io-integration all... |
| CVE-2025-27180 | MEDIUM | 5.5 | 0.2% | Mar 11, 2025 | Substance3D - Modeler versions 1.15.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to... |
| CVE-2025-21170 | MEDIUM | 5.5 | 0.2% | Mar 11, 2025 | Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could re... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now