2025 CVE Vulnerabilities

45,255 CVEs published in 2025.

CVE IDSeverityCVSSDescription
CVE-2025-9023HIGH8.8A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed o...
CVE-2025-8905MEDIUM6.3The Inpersttion For Theme plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and includi...
CVE-2025-8720MEDIUM6.4The Plugin README Parser plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘target’ parameter in...
CVE-2025-8091MEDIUM4.3The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4....
CVE-2025-8080MEDIUM4.4The Alobaidi Captcha plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all ve...
CVE-2025-7778CRITICAL9.8The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient authorization and im...
CVE-2025-7688MEDIUM6.1The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,...
CVE-2025-7662MEDIUM6.5The Gestion de tarifs plugin for WordPress is vulnerable to SQL Injection via the 'tarif' and 'intitule' shortcodes in a...
CVE-2025-7650HIGH7.5The BizCalendar Web plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1...
CVE-2025-7641HIGH7.5The Assistant for NextGEN Gallery plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient...
CVE-2025-7507MEDIUM6.4The elink – Embed Content plugin for WordPress is vulnerable to Malicious Redirect in all versions up to, and including,...
CVE-2025-5844MEDIUM6.4The Radius Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘subHeadingTagName’ paramete...
CVE-2025-9022CRITICAL9.8A vulnerability was identified in SourceCodester Online Bank Management System up to 1.0. This issue affects some unknow...
CVE-2025-9021CRITICAL9.8A vulnerability was determined in SourceCodester Online Bank Management System up to 1.0. This vulnerability affects unk...
CVE-2025-9020MEDIUM4.5A vulnerability was found in PX4 PX4-Autopilot up to 1.15.4. This issue affects the function MavlinkReceiver::handle_mes...
CVE-2025-8604MEDIUM6.4The WP Table Builder – WordPress Table Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...
CVE-2025-9019MEDIUM5.9A vulnerability has been found in tcpreplay 4.5.1. This vulnerability affects the function mask_cidr6 of the file cidr.c...
CVE-2025-9017MEDIUM6.1A vulnerability has been found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unknown code of the f...
CVE-2025-9016HIGH7A vulnerability was identified in Mechrevo Control Center GX V2 5.56.51.48. This affects an unknown part of the file C:\...
CVE-2025-8451MEDIUM6.4The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to DOM-Bas...
CVE-2025-8013LOW3.8The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to,...
CVE-2025-6679CRITICAL9.8The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in...
CVE-2025-9013CRITICAL9.8A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code...
CVE-2025-9012CRITICAL9.8A vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.0. This affects an unknown part of the fil...
CVE-2025-9011CRITICAL9.8A vulnerability was determined in PHPGurukul Online Shopping Portal Project 2.0. Affected by this issue is some unknown ...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now