Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-60183 EUVD-2025-208040GHSA-28ww-g7m4-w94r

WordPress Silencesoft RSS Reader Plugin <= 0.6 - Cross Site Scripting (XSS) Vulnerability

Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Stored XSS.This issue affects Silencesoft RSS Reader: from n/a through <= 0.6.

Affected products

VendorProductAffectedFixed
silence Silencesoft RSS Reader ≤ 0.6 —

References