2025 CVE Vulnerabilities
45,321 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-62147 | MEDIUM | 5.3 | 0.2% | Dec 31, 2025 | Missing Authorization vulnerability in nikmelnik Realbig realbig-media allows Exploiting Incorrectly Configured Access C... |
| CVE-2025-62145 | MEDIUM | 5.3 | 0.2% | Dec 31, 2025 | Missing Authorization vulnerability in NewClarity DMCA Protection Badge dmca-badge allows Exploiting Incorrectly Configu... |
| CVE-2025-62141 | MEDIUM | 5.3 | 0.2% | Dec 31, 2025 | Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly... |
| CVE-2025-62139 | MEDIUM | 5.3 | 0.2% | Dec 31, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descriptions terms-descripti... |
| CVE-2025-62108 | MEDIUM | 5.4 | 0.2% | Dec 31, 2025 | Missing Authorization vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Exploiting Incorrectly Configur... |
| CVE-2025-62098 | MEDIUM | 5.4 | 0.2% | Dec 31, 2025 | Missing Authorization vulnerability in totalsoft Portfolio Gallery gallery-portfolio allows Exploiting Incorrectly Confi... |
| CVE-2025-62091 | MEDIUM | 5.4 | 0.2% | Dec 31, 2025 | Missing Authorization vulnerability in Vollstart Serial Codes Generator and Validator with WooCommerce Support serial-co... |
| CVE-2025-62081 | MEDIUM | 5.3 | 0.2% | Dec 31, 2025 | Missing Authorization vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping... |
| CVE-2025-49349 | MEDIUM | 5.3 | 0.2% | Dec 31, 2025 | Missing Authorization vulnerability in Reuters News Agency Reuters Direct reuters-direct allows Exploiting Incorrectly C... |
| CVE-2025-63020 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wayne Allen Postie... |
| CVE-2025-62750 | MEDIUM | 5.9 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Filipe Seabra WooC... |
| CVE-2025-62149 | MEDIUM | 5.9 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SaifuMak Add Custo... |
| CVE-2025-62144 | MEDIUM | 5.4 | 0.1% | Dec 31, 2025 | Missing Authorization vulnerability in Mohammed Kaludi Core Web Vitals & PageSpeed Booster core-web-vitals-pagespeed-boo... |
| CVE-2025-62142 | MEDIUM | 5.9 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicashmu Post Vide... |
| CVE-2025-62140 | MEDIUM | 5.9 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in plainware Locatora... |
| CVE-2025-62138 | MEDIUM | 5.3 | 0.2% | Dec 31, 2025 | Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configu... |
| CVE-2025-62134 | MEDIUM | 5.4 | 0.1% | Dec 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Si... |
| CVE-2025-62124 | MEDIUM | 5.9 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soli WP Post Signa... |
| CVE-2025-62121 | MEDIUM | 5.9 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Emu Logo Sli... |
| CVE-2025-62120 | MEDIUM | 5.4 | 0.1% | Dec 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Rick Beckman OpenHook thesis-openhook allows Cross Site Request Forge... |
| CVE-2025-62119 | MEDIUM | 5.9 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ViitorCloud Techno... |
| CVE-2025-62117 | MEDIUM | 5.4 | 0.1% | Dec 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Jayce53 EasyIndex easyindex allows Cross Site Request Forgery.This is... |
| CVE-2025-62097 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in seothemes SEO Slid... |
| CVE-2025-62096 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Maximum ... |
| CVE-2025-62095 | MEDIUM | 6.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in neilgee Bootstrap ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now