Silence vulnerabilities
4 vulnerabilities
Known vulnerabilities in Silence products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Silencesoft RSS Reader3 vulnerabilities
- Form Builder1 vulnerabilities
RoutineCVE-2025-60183silence · silencesoft rss reader +1 moreWordPress Silencesoft RSS Reader Plugin <= 0.6 - Cross Site Scripting (XSS) VulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Stored XSS.This issue affects Silencesoft RSS Reader: from n/a through <= 0.6.CVSS5.9MediumEPSS0.27%RoutineCVE-2026-0749drupal +1 moreCross-Site Scripting Vulnerability in Drupal Form Builder ModuleImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Form Builder allows Cross-Site Scripting (XSS).This issue affects Drupal: from 7.X-1.0 through 7.X-1.22.CVSS6.1MediumEPSS0.23%RoutineCVE-2025-60181silence · silencesoft rss reader +1 moreWordPress Silencesoft RSS Reader Plugin <= 0.6 - Server Side Request Forgery (SSRF) VulnerabilityServer-Side Request Forgery (SSRF) vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Server Side Request Forgery.This issue affects Silencesoft RSS Reader: from n/a through <= 0.6.CVSS7.2HighEPSS0.17%RoutineCVE-2025-7842silence · silencesoft rss reader +1 moreSilencesoft RSS Reader <= 0.6 - Cross-Site Request Forgery to RSS Feed DeletionThe Silencesoft RSS Reader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6. This is due to missing or incorrect nonce validation on the 'sil_rss_edit_page' page. This makes it possible for unauthenticated attackers to delete RSS feeds via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.CVSS4.3MediumEPSS0.13%