RSS Feed Widget

RSS Feed Widget has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2026; all 6 are fixed as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (83%). Other recurring categories include Missing Authorization.

Every one of the 6 issues recorded for RSS Feed Widget has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, most of them (2) reported by Bob Matyas. RSS Feed Widget is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.6/ 10
Patch Coverage100%
Open

0

Fixed

6

Get automatic notifications for all RSS Feed Widget vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-9836

RSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

6 records
RSS Feed Widget banner
Latestv3.0.3

RSS Feed Widget

Fahad Mahmood

Author

Fahad Mahmood

3.9(26)
78/100
Last Updated
2025-12-19 (9mo ago)
Active Installs
2,000+
Downloads
241,882
Requires WP
3.0+
Requires PHP
7.0+
Tested up to
WP 6.9.7
Created
2014-02-01 (13y ago)

Author: Fahad Mahmood Project URI: http://androidbubble.com/blog/wordpress/widgets/rss-feed-widget License: GPL 3. See License below for copyright jots and tittles. RSS Feed Widget is a free WordPress plugin for rss feeds display. It is simple to use as after installation you see a menu item under settings. Easily to get started with this plugin, select image size for your feed and save changes. For more customization, you can install Chameleon and choose desired style. This plugin also provides to filter or mute words/text/sentences etc. To filter any word/text/sentence open filter tab and enter word/text/sentence as one per line. You can also choose various image sizes for your feed like thumbnail, medium, large or post thumbnail etc. It also provides the facility of creating shortcode based pages. The shortcode tab describes that how can you create shotcode based pages. The most important and special feature is Advanced Settings. Advanced settings tab allows you to reach custom tag in strange XML based feeds for images. Important! Visit my blog and suggest good features which you wana see in this plugin. Tags feed, facebook, youtube, shortcodes, slider, image, widget, page, techcrucnch, news, updates, aggragator, slideshow, feedly How to use shortcodes for content pages? License This WordPress Plugin is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or any later version. This free software is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this software. If not, see http://www.gnu.org/licenses/gpl-2.0.html.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C