Add to Feedly

Add to Feedly has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; none of them are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

None of the 2 issues recorded for Add to Feedly have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2023.

2 independent researchers contributed these findings, one record each. Add to Feedly is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.9.31.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage0%
Open

2

Fixed

0

Get automatic notifications for all Add to Feedly vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2023-2470

Add to Feedly <= 1.2.11 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings

Read the full analysis

Vulnerability Records

2 records
Add to Feedly banner
Latestv1.2.11

Add to Feedly

David Merinas

Author

David Merinas

4.3(3)
86/100
Last Updated
2018-03-23 (9y ago)
Active Installs
70+
Downloads
10,035
Requires WP
3.3+
Requires PHP
0+
Tested up to
WP 4.9.31
Created
2013-07-31 (13y ago)

Feedly users can subscribe your RSS feed just by clicking the banner “Follow on Feedly” or the floating button that this plugin provides. You can show the banner in English, French or Spanish or whatever you want using custom text. Several sizes available for Floating button.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C