2025 CVE Vulnerabilities
45,233 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-23955 | MEDIUM | 4.3 | 0.2% | Jan 16, 2025 | Missing Authorization vulnerability in xola Xola xola-bookings-for-tours-activities allows Exploiting Incorrectly Config... |
| CVE-2025-23954 | MEDIUM | 4.3 | 0.2% | Jan 16, 2025 | Missing Authorization vulnerability in awcode Salvador – AI Image Generator salvador-ai-image-generator allows Exploitin... |
| CVE-2025-23951 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DIVENGINE Gallery:... |
| CVE-2025-23950 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ezmarketing EZPlay... |
| CVE-2025-23947 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M.J WP-Player wp-p... |
| CVE-2025-23946 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Le-Pixel-Solitaire... |
| CVE-2025-23943 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aruvi PDF.js Short... |
| CVE-2025-23941 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in meinturnierplan Me... |
| CVE-2025-23940 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in horiyuki Image Swi... |
| CVE-2025-23939 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KHAN-IT Image Swit... |
| CVE-2025-23936 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Harun R. Rayhan(th... |
| CVE-2025-23935 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fengler Magic Goog... |
| CVE-2025-23934 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sam Brodie Giveawa... |
| CVE-2025-23933 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpfreeware WpF Ult... |
| CVE-2025-23930 | MEDIUM | 4.3 | 0.2% | Jan 16, 2025 | Missing Authorization vulnerability in paypalmuse PayPal Marketing Solutions paypal-promotions-and-insights allows Explo... |
| CVE-2025-23929 | MEDIUM | 4.3 | 0.2% | Jan 16, 2025 | Missing Authorization vulnerability in wishfulthemes Email Capture & Lead Generation email-capture-lead-generation allow... |
| CVE-2025-23928 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Arsovsk... |
| CVE-2025-23927 | MEDIUM | 6.5 | 0.3% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in massimo.serpilli I... |
| CVE-2025-23926 | MEDIUM | 6.5 | 0.2% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TC.K Ajax WP Query... |
| CVE-2025-23925 | MEDIUM | 6.5 | 0.3% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jp2112 Feedburner ... |
| CVE-2025-23924 | MEDIUM | 6.5 | 0.4% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeremy WP Photo Sp... |
| CVE-2025-23919 | MEDIUM | 5.4 | 0.5% | Jan 16, 2025 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Ella Van Durpe Slides & P... |
| CVE-2025-23917 | MEDIUM | 5.4 | 0.5% | Jan 16, 2025 | Missing Authorization vulnerability in Chandrika Guntur, Morgan Kay Chamber Dashboard Business Directory allows Exploiti... |
| CVE-2025-23916 | MEDIUM | 5.4 | 0.4% | Jan 16, 2025 | Missing Authorization vulnerability in Nuanced Media WP Meetup wp-meetup allows Exploiting Incorrectly Configured Access... |
| CVE-2025-23909 | MEDIUM | 6.5 | 0.4% | Jan 16, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Common Ninja Compa... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now