2025 CVE Vulnerabilities
45,246 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-58993 | HIGH | 7.6 | 0.3% | Sep 9, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS ... |
| CVE-2025-58991 | HIGH | 7.1 | 0.1% | Sep 9, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Cristiano Zanca WooCommerce Booking Bundle Hours allows Stored XSS. T... |
| CVE-2025-58990 | MEDIUM | 5.4 | 0.2% | Sep 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems ShopLento... |
| CVE-2025-58989 | MEDIUM | 6.5 | 0.2% | Sep 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silverplugins217 D... |
| CVE-2025-58988 | MEDIUM | 6.5 | 0.2% | Sep 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Dolson My Tick... |
| CVE-2025-58987 | MEDIUM | 6.5 | 0.2% | Sep 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AntoineH Football ... |
| CVE-2025-58985 | MEDIUM | 6.5 | 0.2% | Sep 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Addition... |
| CVE-2025-58984 | MEDIUM | 5.9 | 0.2% | Sep 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in info@welcart Welca... |
| CVE-2025-58983 | MEDIUM | 5.9 | 0.2% | Sep 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefano Lissa Incl... |
| CVE-2025-58982 | MEDIUM | 5.9 | 0.2% | Sep 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixeline Pixeline'... |
| CVE-2025-58981 | MEDIUM | 5.4 | 0.2% | Sep 9, 2025 | Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker ... |
| CVE-2025-58980 | MEDIUM | 5.3 | 0.2% | Sep 9, 2025 | Missing Authorization vulnerability in recorp Export WP Page to Static HTML/CSS export-wp-page-to-static-html allows Acc... |
| CVE-2025-58979 | MEDIUM | 5.3 | 0.2% | Sep 9, 2025 | Missing Authorization vulnerability in BerqWP BerqWP searchpro allows Exploiting Incorrectly Configured Access Control S... |
| CVE-2025-58978 | MEDIUM | 5.3 | 0.2% | Sep 9, 2025 | Missing Authorization vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Exploiting Inco... |
| CVE-2025-58977 | MEDIUM | 4.9 | 0.1% | Sep 9, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Rhys Wynne WP eBay Product Feeds ebay-feeds-for-wordpress allows Ser... |
| CVE-2025-58976 | MEDIUM | 4.3 | 0.2% | Sep 9, 2025 | Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker ... |
| CVE-2025-58975 | MEDIUM | 4.3 | 0.1% | Sep 9, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Helmut Wandl Advanced Settings advanced-settings allows Cross Site Re... |
| CVE-2025-58215 | HIGH | 8.1 | 0.4% | Sep 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-57540 | MEDIUM | 5.4 | 0.3% | Sep 9, 2025 | A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter confi... |
| CVE-2025-57539 | MEDIUM | 5.4 | 0.3% | Sep 9, 2025 | A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Vir... |
| CVE-2025-57538 | MEDIUM | 5.4 | 0.3% | Sep 9, 2025 | A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of P... |
| CVE-2025-57087 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the countryCode parameter in the werlessAdva... |
| CVE-2025-57072 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the staticRouteGateway parameter in the formSe... |
| CVE-2025-57071 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the vpnUsers parameter in the formAddVpnUsers ... |
| CVE-2025-57070 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the gstUp parameter in the guestWifiRuleRefres... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now