2025 CVE Vulnerabilities
45,251 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-58802 | MEDIUM | 4.3 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in michalzagdan TrustMate.io – WooCommerce integration trustmate-io-inte... |
| CVE-2025-58801 | MEDIUM | 5.4 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in KCS Responder responder allows Cross Site Request Forgery.This issue ... |
| CVE-2025-58800 | MEDIUM | 4.3 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Steve Truman WP Email Template wp-email-template allows Cross Site Re... |
| CVE-2025-58799 | MEDIUM | 4.3 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in themelocation Custom WooCommerce Checkout Fields Editor add-fields-to... |
| CVE-2025-58798 | MEDIUM | 4.3 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Bjorn Manintveld BCM Duplicate Menu bcm-duplicate-menu allows Cross S... |
| CVE-2025-58797 | MEDIUM | 5.3 | 0.3% | Sep 5, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Mahmudul Hasan Arif Ninja Ch... |
| CVE-2025-58796 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dudaster Elementor... |
| CVE-2025-58795 | MEDIUM | 4.3 | 0.2% | Sep 5, 2025 | Missing Authorization vulnerability in Payoneer Checkout Payoneer Checkout payoneer-checkout allows Content Spoofing.Thi... |
| CVE-2025-58794 | MEDIUM | 4.3 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in rainafarai Notification for Telegram notification-for-telegram allows... |
| CVE-2025-58793 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean WPB Element... |
| CVE-2025-58792 | MEDIUM | 4.3 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in WPKube Authors List authors-list allows Cross Site Request Forgery.Th... |
| CVE-2025-58791 | MEDIUM | 5.9 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arjan Olsder SEO A... |
| CVE-2025-58790 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKube Kiwi kiwi-s... |
| CVE-2025-58789 | HIGH | 7.6 | 0.3% | Sep 5, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle WP Full ... |
| CVE-2025-58788 | HIGH | 7.6 | 0.3% | Sep 5, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal License... |
| CVE-2025-58787 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify ... |
| CVE-2025-58786 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VW THEMES Ibtana –... |
| CVE-2025-58785 | MEDIUM | 5.4 | 0.2% | Sep 5, 2025 | Missing Authorization vulnerability in Jiro Sasamoto Ray Enterprise Translation lingotek-translation allows Exploiting I... |
| CVE-2025-58784 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arisoft ARI Fancy ... |
| CVE-2025-58783 | MEDIUM | 4.3 | 0.2% | Sep 5, 2025 | Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2025-10011 | HIGH | 8.8 | 0.5% | Sep 5, 2025 | A weakness has been identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the fil... |
| CVE-2025-58313 | LOW | 2.5 | 0.1% | Sep 5, 2025 | Race condition vulnerability in the device standby module. Impact: Successful exploitation of this vulnerability may cau... |
| CVE-2025-58296 | MEDIUM | 4.7 | 0.1% | Sep 5, 2025 | Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect funct... |
| CVE-2025-58281 | MEDIUM | 5.5 | 0.1% | Sep 5, 2025 | Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation of this vulnerabilit... |
| CVE-2025-58280 | MEDIUM | 5.5 | 0.1% | Sep 5, 2025 | Vulnerability of exposing object heap addresses in the Ark eTS module. Impact: Successful exploitation of this vulnerabi... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now