2025 CVE Vulnerabilities
45,251 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-58853 | HIGH | 7.1 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Popping Sidebars and Widgets Light popping-sidebars-and-wid... |
| CVE-2025-58852 | HIGH | 7.1 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Mark O'Donnell MSTW League Manager mstw-league-manager allows Stored ... |
| CVE-2025-58851 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DigitalCourt Boxed... |
| CVE-2025-58850 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in marcshowpass Showp... |
| CVE-2025-58849 | HIGH | 7.1 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Deepak S Hide Real Download Path hide-real-download-path allows Store... |
| CVE-2025-58848 | HIGH | 7.1 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in aakash1911 WP likes wp-likes allows Reflected XSS.This issue affects ... |
| CVE-2025-58847 | HIGH | 7.1 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Yaidier WN Flipbox Pro wn-flipbox-pro allows Reflected XSS.This issue... |
| CVE-2025-58846 | HIGH | 7.1 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Dejan Markovic WordPress Buffer – HYPESocial. Social Media Auto Post,... |
| CVE-2025-58845 | HIGH | 7.1 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in ChrisHurst Bulk Watermark bulk-watermark allows Reflected XSS.This is... |
| CVE-2025-58844 | HIGH | 7.1 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Subhash Kumar Database to Excel database-to-excel allows Stored XSS.T... |
| CVE-2025-58843 | HIGH | 7.1 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in David Merinas Auto Last Youtube Video auto-last-youtube-video allows ... |
| CVE-2025-58842 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in givecloud Donation... |
| CVE-2025-58841 | MEDIUM | 5.5 | 0.3% | Sep 5, 2025 | Incorrect Privilege Assignment vulnerability in John Luetke Media Author media-author allows Privilege Escalation.This i... |
| CVE-2025-58840 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ibnul H. Custom Te... |
| CVE-2025-58839 | HIGH | 7.2 | 0.4% | Sep 5, 2025 | Deserialization of Untrusted Data vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows... |
| CVE-2025-58838 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zakir Smooth Accor... |
| CVE-2025-58837 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shiful H SS Font A... |
| CVE-2025-58836 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Franz Wieser FW An... |
| CVE-2025-58835 | MEDIUM | 5.3 | 0.3% | Sep 5, 2025 | Improper Validation of Specified Quantity in Input vulnerability in calliko Bonus for Woo bonus-for-woo allows Accessing... |
| CVE-2025-58834 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gugu short.io wp-s... |
| CVE-2025-58833 | HIGH | 8.8 | 0.2% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect invelity-mygls-connect allows Object ... |
| CVE-2025-58832 | MEDIUM | 5.9 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Search b... |
| CVE-2025-58831 | MEDIUM | 4.3 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in snagysandor Parallax Scrolling Enllax.js parallax-scrolling-enllax-js... |
| CVE-2025-58830 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snagysandor Parall... |
| CVE-2025-58829 | MEDIUM | 4.9 | 0.2% | Sep 5, 2025 | Server-Side Request Forgery (SSRF) vulnerability in aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGP... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now