Add to Feedly
Add to Feedly has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; none of them are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
None of the 2 issues recorded for Add to Feedly have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2023.
2 independent researchers contributed these findings, one record each. Add to Feedly is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.9.31.
CVE-2023-2470Add to Feedly <= 1.2.11 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
Read the full analysisVulnerability Records

Add to Feedly
Author
David Merinas
Feedly users can subscribe your RSS feed just by clicking the banner “Follow on Feedly” or the floating button that this plugin provides. You can show the banner in English, French or Spanish or whatever you want using custom text. Several sizes available for Floating button.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C