2025 CVE Vulnerabilities
45,254 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-58218 | HIGH | 7.2 | 0.4% | Aug 27, 2025 | Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition small-package-q... |
| CVE-2025-58217 | HIGH | 7.1 | 0.1% | Aug 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in GeroNikolov Instant Breaking News instant-breaking-news allows Stored... |
| CVE-2025-58216 | MEDIUM | 5.9 | 0.2% | Aug 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgwhite33 WP Thumb... |
| CVE-2025-58213 | MEDIUM | 6.5 | 0.2% | Aug 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ameliabooking Book... |
| CVE-2025-58212 | MEDIUM | 6.5 | 0.2% | Aug 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in epeken Epeken All ... |
| CVE-2025-58211 | MEDIUM | 6.5 | 0.2% | Aug 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in alexvtn Chatbox Ma... |
| CVE-2025-58209 | MEDIUM | 6.5 | 0.2% | Aug 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtCamp Transcoder ... |
| CVE-2025-58208 | MEDIUM | 6.5 | 0.2% | Aug 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org PDF fo... |
| CVE-2025-58205 | MEDIUM | 6.5 | 0.2% | Aug 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader El... |
| CVE-2025-58204 | MEDIUM | 4.7 | 0.2% | Aug 27, 2025 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podc... |
| CVE-2025-58203 | MEDIUM | 4.4 | 0.2% | Aug 27, 2025 | Server-Side Request Forgery (SSRF) vulnerability in solacewp Solace Extra solace-extra allows Server Side Request Forger... |
| CVE-2025-58202 | MEDIUM | 4.3 | 0.1% | Aug 27, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Plugins and Snippets Simple Page Access Restriction simple-page-acces... |
| CVE-2025-58201 | MEDIUM | 5.3 | 0.2% | Aug 27, 2025 | Missing Authorization vulnerability in AfterShip & Automizely AfterShip Tracking aftership-woocommerce-tracking allows A... |
| CVE-2025-58198 | MEDIUM | 6.5 | 0.2% | Aug 27, 2025 | Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configur... |
| CVE-2025-58197 | MEDIUM | 6.5 | 0.2% | Aug 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mra13 Simple Downl... |
| CVE-2025-58196 | MEDIUM | 6.5 | 0.2% | Aug 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uicore UiCore Elem... |
| CVE-2025-58195 | MEDIUM | 6.5 | 0.2% | Aug 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elemento... |
| CVE-2025-58194 | MEDIUM | 6.5 | 0.2% | Aug 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Pa... |
| CVE-2025-58193 | MEDIUM | 4.3 | 0.2% | Aug 27, 2025 | Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Con... |
| CVE-2025-58192 | MEDIUM | 5.4 | 0.2% | Aug 27, 2025 | Missing Authorization vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Exploiting Incorrectly Configur... |
| CVE-2025-55422 | HIGH | 8.8 | 0.4% | Aug 27, 2025 | In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus. |
| CVE-2025-51667 | HIGH | 7 | 0.2% | Aug 27, 2025 | An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-... |
| CVE-2025-50979 | HIGH | 8.6 | 8.1% | Aug 27, 2025 | NodeBB v4.3.0 is vulnerable to SQL injection in its search-categories API endpoint (/api/v3/search/categories). The sear... |
| CVE-2025-5187 | MEDIUM | 6.7 | 0.4% | Aug 27, 2025 | A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete th... |
| CVE-2025-57821 | MEDIUM | 4.2 | 0.2% | Aug 27, 2025 | Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.0, it is possible to craft a m... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now