Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.2 views

CVE-2025-60183

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Stored XSS.This issue affects Silencesoft RSS Reader: from n/a through = 0.6...

5.9CVSS5.5AI score0.00042EPSS
Exploits0References1
CVE
CVE
added 2026/02/20 3:46 p.m.6 views

CVE-2025-60183

CVE-2025-60183 concerns the WordPress plugin Silencesoft RSS Reader, specifically the external-rss-reader component. The connected Red Hat and NVD entries describe an improper neutralization of input during web page generation that enables a Stored Cross-Site Scripting (XSS) vulnerability, affect...

5.9CVSS5.5AI score0.00042EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-31230

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.0003EPSS
Exploits0References2
NVD
NVD
added 2025/09/26 9:15 a.m.1 views

CVE-2025-60181

Server-Side Request Forgery SSRF vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Server Side Request Forgery.This issue affects Silencesoft RSS Reader: from n/a through = 0.6...

5.4CVSS0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/26 8:32 a.m.3 views

CVE-2025-60181 WordPress Silencesoft RSS Reader Plugin <= 0.6 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Server Side Request Forgery.This issue affects Silencesoft RSS Reader: from n/a through = 0.6...

5.4CVSS5.9AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/25 5:32 a.m.1 views

CVE-2025-7842

The Silencesoft RSS Reader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6. This is due to missing or incorrect nonce validation on the 'silrsseditpage' page. This makes it possible for unauthenticated attackers to delete RSS feeds via a...

4.3CVSS6.7AI score0.00026EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/23 4:25 a.m.1 views

CVE-2025-7842 Silencesoft RSS Reader <= 0.6 - Cross-Site Request Forgery to RSS Feed Deletion

The Silencesoft RSS Reader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6. This is due to missing or incorrect nonce validation on the 'silrsseditpage' page. This makes it possible for unauthenticated attackers to delete RSS feeds via a...

4.3CVSS6.7AI score0.00026EPSS
Exploits0References2
CVE
CVE
added 2025/08/23 4:25 a.m.11 views

CVE-2025-7842

CVE-2025-7842 – Silencesoft RSS Reader (WordPress)

4.3CVSS6.3AI score0.00026EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/08/22 10:14 p.m.3 views

WordPress Silencesoft RSS Reader plugin <= 0.6 - Cross-Site Request Forgery to RSS Feed Deletion vulnerability

Cross-Site Request Forgery to RSS Feed Deletion vulnerability discovered by Nabil Irawan in WordPress Plugin Silencesoft RSS Reader versions = 0.6...

4.3CVSS6.7AI score0.00026EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder