2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-55250 | MEDIUM | 5.3 | 0.1% | Jan 19, 2026 | HCL AION version 2 is affected by a Technical Error Disclosure vulnerability. This can expose sensitive technical detail... |
| CVE-2025-55249 | MEDIUM | 5.3 | 0.2% | Jan 19, 2026 | HCL AION is affected by a Missing Security Response Headers vulnerability. The absence of standard security headers may ... |
| CVE-2025-52661 | MEDIUM | 5.3 | 0.1% | Jan 19, 2026 | HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse,... |
| CVE-2025-59355 | MEDIUM | 6.5 | 0.4% | Jan 19, 2026 | A vulnerability. When org.apache.linkis.metadata.util.HiveUtils.decode() fails to perform Base64 decoding, it records t... |
| CVE-2025-15537 | MEDIUM | 5.5 | 0.2% | Jan 18, 2026 | A security vulnerability has been detected in Mapnik up to 4.2.0. This issue affects the function mapnik::dbf_file::stri... |
| CVE-2025-15536 | MEDIUM | 5.5 | 0.2% | Jan 18, 2026 | A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSeg... |
| CVE-2025-15531 | MEDIUM | 5.5 | 0.7% | Jan 17, 2026 | A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the fi... |
| CVE-2025-8615 | MEDIUM | 6.4 | 0.2% | Jan 17, 2026 | The CubeWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cubewp_shortcode_taxonomy ... |
| CVE-2025-14078 | MEDIUM | 5.3 | 0.3% | Jan 17, 2026 | The PAYGENT for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and inclu... |
| CVE-2025-12129 | MEDIUM | 5.3 | 0.2% | Jan 17, 2026 | The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all vers... |
| CVE-2025-12984 | MEDIUM | 4.9 | 0.3% | Jan 17, 2026 | The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in... |
| CVE-2025-14029 | MEDIUM | 5.3 | 0.2% | Jan 17, 2026 | The Community Events plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability... |
| CVE-2025-12825 | MEDIUM | 5.3 | 0.5% | Jan 17, 2026 | The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a mi... |
| CVE-2025-12168 | MEDIUM | 4.3 | 0.2% | Jan 17, 2026 | The Phrase TMS Integration for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to ... |
| CVE-2025-14463 | MEDIUM | 5.3 | 0.3% | Jan 17, 2026 | The Payment Button for PayPal plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, a... |
| CVE-2025-13725 | MEDIUM | 6.5 | 0.4% | Jan 17, 2026 | The Gutenberg Thim Blocks – Page Builder, Gutenberg Blocks for the Block Editor plugin for WordPress is vulnerable to ar... |
| CVE-2025-14632 | MEDIUM | 4.4 | 0.2% | Jan 17, 2026 | The Filr – Secure document library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via unrestricted fi... |
| CVE-2025-14450 | MEDIUM | 6.5 | 0.2% | Jan 17, 2026 | The Wallet System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missi... |
| CVE-2025-14075 | MEDIUM | 5.3 | 0.3% | Jan 17, 2026 | The WP Hotel Booking plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc... |
| CVE-2025-12718 | MEDIUM | 5.8 | 0.2% | Jan 17, 2026 | The Quick Contact Form plugin for WordPress is vulnerable to Open Mail Relay in all versions up to, and including, 8.2.6... |
| CVE-2025-12002 | MEDIUM | 5.9 | 0.4% | Jan 17, 2026 | The Feeds for YouTube Pro plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including... |
| CVE-2025-56451 | MEDIUM | 6.1 | 0.2% | Jan 16, 2026 | Cross site scripting vulnerability in seeyon Zhiyuan A8+ Collaborative Management Software 7.0 via the topValue paramete... |
| CVE-2025-69581 | MEDIUM | 5.5 | 0.2% | Jan 16, 2026 | An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personal_data endpoint exposes full sensitive user i... |
| CVE-2025-51602 | MEDIUM | 4.8 | 0.4% | Jan 16, 2026 | mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01... |
| CVE-2025-43904 | MEDIUM | 4.2 | 0.2% | Jan 16, 2026 | In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a Coordinator to promote a user ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now