Skip to content
OpenAdvisories

Vendor

silence

3 known vulnerabilities.

Products

Silencesoft RSS Reader 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-60183

    WordPress Silencesoft RSS Reader Plugin <= 0.6 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Stored XSS.This issue affects Silencesoft RSS Reader: from n/a through <= 0.6.

    silence Silencesoft RSS Reader
  • Medium 5.4
    CVE-2025-60181

    WordPress Silencesoft RSS Reader Plugin <= 0.6 - Server Side Request Forgery (SSRF) Vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Server Side Request Forgery.This issue affects Silencesoft RSS Reader: from n/a through <= 0.6.

    silence Silencesoft RSS Reader
  • Medium 4.3
    CVE-2025-7842

    Silencesoft RSS Reader <= 0.6 - Cross-Site Request Forgery to RSS Feed Deletion

    The Silencesoft RSS Reader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6. This is due to missing or incorrect nonce validation on the 'sil_rss_edit_page' page. This makes it possible for unauthentic…

    silence Silencesoft RSS Reader Web / CMS