Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

HIGH Severity CVEs

CVSS 7.0 – 8.9

CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption

143,102
Total
363
Known Exploited
Showing 73,421 of 143,102 total · Page 772/1469
7.5
CVE-2025-23774

Insertion of Sensitive Information Into Sent Data vulnerability in Niket Joshi WPDB to Sql wpdb-to-sql allows Retrieve E

7.1
CVE-2025-23770

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Caspie Fast Tube f

7.1
CVE-2025-23769

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dreamsofmatter Con

7.1
CVE-2025-23768

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in inwavethemes InFun

7.1
CVE-2025-23758

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pootlepress Pootle

7.1
CVE-2025-23746

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Edem CMC MIGRATE c

7.1
CVE-2025-23732

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in franciscopalacios

7.1
CVE-2025-23709

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kiroro Formatted p

7.1
CVE-2025-23706

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in milordk Jet Skinne

7.1
CVE-2025-23701

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in limesquare Lime De

7.1
CVE-2025-23700

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonisink yCyclista

7.1
CVE-2025-23697

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webdeal Podčlánkov

7.1
CVE-2025-23696

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronan Mockett Stag

7.1
CVE-2025-23695

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kinlane CtyGrid Hy

7.1
CVE-2025-23686

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phpdevca Admin Men

7.1
CVE-2025-23683

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xdxdVSxdxd MACME m

7.1
CVE-2025-23682

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bhuvnesh Gupta Pre

7.1
CVE-2025-23681

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tahminajannat REDI

7.1
CVE-2025-23679

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Flourish Pixel FP

7.1
CVE-2025-23678

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Md Imranur Rahman

7.1
CVE-2025-23676

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shawfactor LH Emai

7.1
CVE-2025-23674

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andygauk Bit.ly li

7.1
CVE-2025-23672

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tenteeglobal Insta

7.1
CVE-2025-23643

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in a.ankit ReadMe Cre

7.1
CVE-2025-23631

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sarah Lewis Conten

7.1
CVE-2025-23630

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Irshad A.Khan Cybe

7.1
CVE-2025-23625

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awcode Unique UX u

7.1
CVE-2025-23611

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webhue WH Cache &

7.1
CVE-2025-23610

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tehsmash Ultimate

7.1
CVE-2025-23609

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Helle1 Tagesteller

7.1
CVE-2025-23607

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Camoo Sarl CAMOO S

7.1
CVE-2025-23606

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sebkay Calendi cal

7.1
CVE-2025-23605

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lampd Call To Acti

7.1
CVE-2025-23604

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maeve Lander Rezdy

7.1
CVE-2025-23603

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MohammadJafar Khaj

7.1
CVE-2025-23602

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Europe Ecologie Le

7.1
CVE-2025-23601

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in patrice Tab My Con

7.1
CVE-2025-23597

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sabareesha Rio Pho

7.1
CVE-2025-23592

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in animexxx dForms df

7.1
CVE-2025-23589

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in markugwuanyi Conte

7.1
CVE-2025-23583

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Explara Explara Me

7.1
CVE-2025-23578

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Custom

7.1
CVE-2025-23548

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bilal TAS Responsi

7.1
CVE-2025-23535

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in martin_ziegert REA

7.5
CVE-2025-23512

Missing Authorization vulnerability in 118group Team 118GROUP Agent team-118group-agent allows Exploiting Incorrectly Co

7.1
CVE-2025-23509

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in siteheart HyperCom

7.1
CVE-2025-23507

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blrt Blrt WP Embed

7.1
CVE-2025-23506

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imsoftware WP IMAP

7.1
CVE-2025-23503

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in osolwordpress Cust

7.1
CVE-2025-23500

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in faaiq Simple Custo

Frequently Asked Questions

What does HIGH severity mean for CVEs?

CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption

How many high severity CVEs exist?

There are 143,102 CVE records rated HIGH in our database. Of these, 363 are listed in CISA's Known Exploited Vulnerabilities catalog.

How should I prioritize high severity vulnerabilities?

HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.

Detect HIGH Vulnerabilities

CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.

Get Started