Plugin icon

RSS Feed Widget

rss-feed-widget

Vulnerabilities:

6

Last Updated:

December 19, 2025

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-01-07
Title
RSS Feed Widget < 3.0.3 - Missing Authorization
Fixed in
Fixed in 3.0.3
CVSS
4.3 (medium)
Published
2024-10-22
Title
RSS Feed Widget < 3.0.0 - Contributor+ Stored XSS
Fixed in
Fixed in 3.0.0
CVSS
5.9 (medium)
Published
2024-10-22
Title
RSS Feed Widget < 3.0.1 - Reflected XSS
Fixed in
Fixed in 3.0.1
CVSS
4.2 (medium)
Published
2024-10-17
Title
RSS Feed Widget < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos Shortcode
Fixed in
Fixed in 3.0.0
CVSS
6.4 (medium)
Published
2024-04-19
Title
RSS Feed Widget < 2.9.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.9.8
CVSS
4.4 (medium)
Published
2020-08-10
Title
RSS Feed Widget < 2.8.1 - Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.8.1
CVSS
4.6 (medium)