FeedWordPress Advanced Filters
FeedWordPress Advanced Filters has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for FeedWordPress Advanced Filters has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
All of these findings were reported by Skalucy. FeedWordPress Advanced Filters is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.0.38.
CVE-2025-68843FeedWordPress Advanced Filters <= 0.6.2 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
FeedWordPress Advanced Filters
Author
Bas Schuiling
Author: Bas Schuiling Project URI: http://www.weblogmechanic.com/plugins/feedwordpress-advanced-filters/ License: GPL 2. See License below for copyright jots and tittles. FeedWordPress Advanced Filters (FAF) gives you powerful options to filter your aggregated Feedwordpress items. Tidy output, import images,make posts expire, rewrite your links… New features are being added constantly. Features: Remove Keywords or HTML tags Get and save images into your blog in your defined sizes Set featured images from your feeds Put posts in different categories based on the keywords you want Make aggregated posts expire after some time Set links to open in new window or use your outbound tracker URL FAF requires Feedwordpress plugin and PHP 5.3 to be installed! Expire posts filter requires post expirator plugin Short Description FeedWordPress Advanced Filters (FAF) gives you powerful options to filter your aggregated Feedwordpress items. Tidy output, import images,make posts expire, rewrite your links… New features are being added constantly. License The FeedWordPress Advanced Filter plugin is copyright © 2013 by Bas Schuiling. It uses code derived or translated from: according to the terms of the GNU General Public License. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C