2025 CVE Vulnerabilities
45,137 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-69140 | HIGH | 7.1 | 0.2% | Jun 17, 2026 | Unauthenticated Cross Site Scripting (XSS) in SweetDate Core < 1.1.5 versions. |
| CVE-2025-69130 | HIGH | 8.8 | 0.5% | Jun 17, 2026 | Subscriber PHP Object Injection in Entrepreneur - Booking for Small Businesses WordPress Theme <= 3.1.3 versions. |
| CVE-2025-69128 | HIGH | 8.6 | 0.5% | Jun 17, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in EMV JobCareer allows Pat... |
| CVE-2025-69126 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Fortius <= 2.3.0 versions. |
| CVE-2025-69123 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Snow Club <= 1.1 versions. |
| CVE-2025-69120 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions. |
| CVE-2025-69115 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme <= 1.2.2 versions. |
| CVE-2025-69106 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Imba <= 1.5.0 versions. |
| CVE-2025-68524 | HIGH | 7.1 | 0.2% | Jun 17, 2026 | Unauthenticated Cross Site Scripting (XSS) in Avante < 3.0.5 versions. |
| CVE-2025-66391 | HIGH | 8.8 | 0.4% | Jun 17, 2026 | In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write o... |
| CVE-2025-69178 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions. |
| CVE-2025-69177 | HIGH | 8.1 | 0.5% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions. |
| CVE-2025-69176 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in ITactics <= 1.0 versions. |
| CVE-2025-69173 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions. |
| CVE-2025-69172 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Resurs <= 1.3 versions. |
| CVE-2025-69171 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions. |
| CVE-2025-69168 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Spike <= 1.2 versions. |
| CVE-2025-69167 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Eros <= 1.3 versions. |
| CVE-2025-69165 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Choreo <= 1.6 versions. |
| CVE-2025-69163 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in WineShop <= 3.17 versions. |
| CVE-2025-69162 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Grecko <= 5.17 versions. |
| CVE-2025-69161 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Snowy <= 1.13 versions. |
| CVE-2025-69160 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Gita <= 1.11 versions. |
| CVE-2025-69159 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Printo <= 1.11 versions. |
| CVE-2025-69151 | HIGH | 7.1 | 0.2% | Jun 17, 2026 | Unauthenticated Cross Site Scripting (XSS) in Grand Car Rental <= 3.7 versions. |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now