External Rss Reader Vulnerabilities

The Silencesoft RSS Reader plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 0.6. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application which can be used to query and modify information...

CVSS:

7.2

Affected:

up to 0.6

Fix:

No patched version reported

Disclosed:

Sep 26, 2025

CVE-2025-60181 on NVD →

The Silencesoft RSS Reader plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in...

CVSS:

4.4

Affected:

up to 0.6

Fix:

No patched version reported

Disclosed:

Sep 26, 2025

CVE-2025-60183 on NVD →

The Silencesoft RSS Reader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6. This is due to missing or incorrect nonce validation on the 'sil_rss_edit_page' page. This makes it possible for unauthenticated attackers to delete RSS feeds via a forged request grant...

CVSS:

4.3

Affected:

up to 0.6

Fix:

No patched version reported

Disclosed:

Aug 22, 2025

CVE-2025-7842 on NVD →