2025 CVE Vulnerabilities
45,254 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-49407 | HIGH | 8.8 | 0.4% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez ... |
| CVE-2025-49405 | MEDIUM | 4.3 | 0.2% | Aug 28, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-49404 | HIGH | 8.5 | 0.3% | Aug 28, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in purethemes Listeo ... |
| CVE-2025-49402 | HIGH | 8.5 | 0.3% | Aug 28, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scriptsbundle Exer... |
| CVE-2025-49388 | CRITICAL | 9.8 | 5.0% | Aug 28, 2025 | Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Esca... |
| CVE-2025-49387 | CRITICAL | 10 | 0.4% | Aug 28, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor For... |
| CVE-2025-49383 | HIGH | 8.1 | 0.4% | Aug 28, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-48365 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imaprogrammer Cust... |
| CVE-2025-48364 | MEDIUM | 4.9 | 0.2% | Aug 28, 2025 | Server-Side Request Forgery (SSRF) vulnerability in vEnCa-X rajce rajce allows Server Side Request Forgery.This issue af... |
| CVE-2025-48363 | MEDIUM | 4.3 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Metin Saraç Popup for CF7 with Sweet Alert cf7-sweet-alert-popup allo... |
| CVE-2025-48362 | MEDIUM | 5.4 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accounting allows Cros... |
| CVE-2025-48361 | MEDIUM | 5.3 | 0.3% | Aug 28, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in Saeed Sattar Beglou Hesabfa Accounting hesabfa-accoun... |
| CVE-2025-48360 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Razvan Stanga Varn... |
| CVE-2025-48359 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in thaihavnn07 ATT YouTube Widget att-youtube allows Stored XSS.This iss... |
| CVE-2025-48358 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in everythingwp Risk ... |
| CVE-2025-48357 | MEDIUM | 5.4 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Theme Century Century ToolKit century-toolkit allows Cross Site Reque... |
| CVE-2025-48356 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Isra Kanpress kanp... |
| CVE-2025-48354 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Smart Widgets B... |
| CVE-2025-48353 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in dactum Clickbank WordPress Plugin (Niche Storefront) clickbank-niche-... |
| CVE-2025-48352 | MEDIUM | 5.9 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sitesearch-yandex ... |
| CVE-2025-48351 | HIGH | 7.1 | 0.1% | Aug 28, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in PluginsPoint Kento Splash Screen kento-splash-screen allows Stored XS... |
| CVE-2025-48350 | MEDIUM | 4.3 | 0.2% | Aug 28, 2025 | Missing Authorization vulnerability in Basar Ventures AutoWP autowp-ai-content-writer-rewriter allows Exploiting Incorre... |
| CVE-2025-48349 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in origincode Video G... |
| CVE-2025-48348 | MEDIUM | 4.3 | 0.2% | Aug 28, 2025 | Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrect... |
| CVE-2025-48347 | MEDIUM | 6.5 | 0.2% | Aug 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vincent Mimoun-Pra... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now