2025 CVE Vulnerabilities
45,321 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-63027 | MEDIUM | 6.5 | 0.1% | Dec 30, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webcreations907 WB... |
| CVE-2025-62746 | MEDIUM | 6.5 | 0.1% | Dec 30, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeFlavors Featur... |
| CVE-2025-15251 | MEDIUM | 6.3 | 0.3% | Dec 30, 2025 | A vulnerability was detected in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot... |
| CVE-2025-15250 | MEDIUM | 4.7 | 0.2% | Dec 30, 2025 | A security vulnerability has been detected in 08CMS Novel System up to 3.4. This issue affects some unknown processing o... |
| CVE-2025-15249 | MEDIUM | 5.1 | 0.2% | Dec 30, 2025 | A weakness has been identified in zhujunliang3 work_platform up to 6bc5a50bb527ce27f7906d11ea6ec139beb79c31. This vulner... |
| CVE-2025-14426 | MEDIUM | 4.3 | 0.2% | Dec 30, 2025 | The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabil... |
| CVE-2025-15246 | MEDIUM | 6.3 | 0.2% | Dec 30, 2025 | A vulnerability was determined in aizuda snail-job up to 1.7.0 on macOS. Affected by this vulnerability is the function ... |
| CVE-2025-69093 | MEDIUM | 5.3 | 0.2% | Dec 30, 2025 | Missing Authorization vulnerability in wpdesk ShopMagic shopmagic-for-woocommerce allows Exploiting Incorrectly Configur... |
| CVE-2025-69092 | MEDIUM | 6.5 | 0.1% | Dec 30, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essent... |
| CVE-2025-69091 | MEDIUM | 4.3 | 0.2% | Dec 30, 2025 | Missing Authorization vulnerability in Kraft Plugins Demo Importer Plus demo-importer-plus allows Exploiting Incorrectly... |
| CVE-2025-69089 | MEDIUM | 6.5 | 0.1% | Dec 30, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in autolistings Auto ... |
| CVE-2025-69088 | MEDIUM | 6.5 | 0.1% | Dec 30, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vidish Combo Offer... |
| CVE-2025-69033 | MEDIUM | 6.5 | 0.1% | Dec 30, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Fil... |
| CVE-2025-69032 | MEDIUM | 5.4 | 0.2% | Dec 30, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes FiveStar fivestar allows Exploiting Inco... |
| CVE-2025-69031 | MEDIUM | 5.3 | 0.2% | Dec 30, 2025 | Missing Authorization vulnerability in Skywarrior Arcane arcane allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2025-69030 | MEDIUM | 5.4 | 0.2% | Dec 30, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allow... |
| CVE-2025-69029 | MEDIUM | 5.4 | 0.2% | Dec 30, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in Select-Themes Struktur struktur allows Exploiting Inco... |
| CVE-2025-69028 | MEDIUM | 5.3 | 0.2% | Dec 30, 2025 | Missing Authorization vulnerability in BoldGrid weForms weforms allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2025-69027 | MEDIUM | 5.3 | 0.2% | Dec 30, 2025 | Missing Authorization vulnerability in tychesoftwares Product Delivery Date for WooCommerce – Lite product-delivery-date... |
| CVE-2025-69026 | MEDIUM | 4.3 | 0.2% | Dec 30, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roxnor PopupKit popup-builde... |
| CVE-2025-69025 | MEDIUM | 4.3 | 0.2% | Dec 30, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Aethonic Poptics poptics all... |
| CVE-2025-69024 | MEDIUM | 6.5 | 0.2% | Dec 30, 2025 | Missing Authorization vulnerability in bizswoop BizPrint print-google-cloud-print-gcp-woocommerce allows Exploiting Inco... |
| CVE-2025-69023 | MEDIUM | 4.3 | 0.2% | Dec 30, 2025 | Missing Authorization vulnerability in Marketing Fire Discussion Board wp-discussion-board allows Exploiting Incorrectly... |
| CVE-2025-69022 | MEDIUM | 5.4 | 0.2% | Dec 30, 2025 | Missing Authorization vulnerability in Weblizar - WordPress Themes & Plugin HR Management Lite hr-management-lite allows... |
| CVE-2025-69021 | MEDIUM | 5.4 | 0.1% | Dec 30, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Site Request Forgery.Thi... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now