2025 CVE Vulnerabilities
45,255 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-6681 | MEDIUM | 6.4 | 0.2% | Jul 29, 2025 | The Fan Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions... |
| CVE-2025-26400 | MEDIUM | 6.5 | 0.2% | Jul 29, 2025 | SolarWinds Web Help Desk was reported to be affected by an XML External Entity Injection (XXE) vulnerability that could ... |
| CVE-2025-53082 | CRITICAL | 9.1 | 0.4% | Jul 29, 2025 | An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unin... |
| CVE-2025-53081 | CRITICAL | 9.1 | 0.4% | Jul 29, 2025 | An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in uninte... |
| CVE-2025-8264 | CRITICAL | 9 | 0.4% | Jul 29, 2025 | Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in... |
| CVE-2025-6495 | HIGH | 7.5 | 0.4% | Jul 29, 2025 | The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and inc... |
| CVE-2025-53649 | MEDIUM | 5.9 | 0.1% | Jul 29, 2025 | "SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V... |
| CVE-2025-53080 | MEDIUM | 6.5 | 0.3% | Jul 29, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) al... |
| CVE-2025-53079 | MEDIUM | 4.9 | 0.4% | Jul 29, 2025 | Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sen... |
| CVE-2025-53078 | CRITICAL | 9.8 | 0.4% | Jul 29, 2025 | Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via ... |
| CVE-2025-53077 | MEDIUM | 6.5 | 0.3% | Jul 29, 2025 | An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without... |
| CVE-2025-4566 | MEDIUM | 6.4 | 0.2% | Jul 29, 2025 | The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
| CVE-2025-4370 | MEDIUM | 5.3 | 0.3% | Jul 29, 2025 | The Brizy – Page Builder plugin for WordPress is vulnerable to limited file uploads due to missing authorization on proc... |
| CVE-2025-3075 | MEDIUM | 5.4 | 0.2% | Jul 29, 2025 | The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
| CVE-2025-7811 | MEDIUM | 6.4 | 0.2% | Jul 29, 2025 | The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's... |
| CVE-2025-7810 | MEDIUM | 5.4 | 0.2% | Jul 29, 2025 | The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'd... |
| CVE-2025-7809 | MEDIUM | 6.4 | 0.2% | Jul 29, 2025 | The StreamWeasels Twitch Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ... |
| CVE-2025-54666 | — | — | — | Jul 29, 2025 | Rejected reason: Not used |
| CVE-2025-54665 | — | — | — | Jul 29, 2025 | Rejected reason: Not used |
| CVE-2025-54664 | — | — | — | Jul 29, 2025 | Rejected reason: Not used |
| CVE-2025-54663 | — | — | — | Jul 29, 2025 | Rejected reason: Not used |
| CVE-2025-54662 | — | — | — | Jul 29, 2025 | Rejected reason: Not used |
| CVE-2025-54661 | — | — | — | Jul 29, 2025 | Rejected reason: Not used |
| CVE-2025-54769 | HIGH | 8.8 | 3.0% | Jul 29, 2025 | An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in... |
| CVE-2025-54768 | MEDIUM | 5.3 | 3.9% | Jul 29, 2025 | An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now