Cross-Site Request Forgery Vulnerability in Silencesoft RSS Reader Plugin for WordPress

CVE-2025-7842

What is CVE-2025-7842?

The Silencesoft RSS Reader plugin for WordPress suffers from a Cross-Site Request Forgery vulnerability, allowing unauthorized individuals to execute actions on behalf of authenticated users. This vulnerability arises from inadequate nonce validation on the 'sil_rss_edit_page' endpoint, enabling malicious actors to trick site administrators into executing requests, such as deleting RSS feeds, without their knowledge. All versions up to and including 0.6 are impacted, emphasizing the need for immediate attention and remediation to ensure site security.

References