Server-Side Request Forgery Vulnerability in Silencesoft RSS Reader
CVE-2025-60181

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Silencesoft Rss Reader
Vendor
CVE Published:
26 September 2025

What is CVE-2025-60181?

The vulnerability in Silencesoft RSS Reader allows for server-side request forgery (SSRF), potentially enabling attackers to make unauthorized requests from the server. This could lead to exposure of sensitive internal resources and further compromise web applications utilizing the affected plugin versions. Website administrators are advised to assess their exposure and implement necessary security measures.

Affected Version(s)

Silencesoft RSS Reader <= 0.6

References

https://patchstack.com/database/wordpress/plugin/external...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan (Patchstack Alliance)
JSON
.
CVE-2025-60181 : Server-Side Request Forgery Vulnerability in Silencesoft RSS Reader