RSS Feed Widget

rss-feed-widget · plugin

Known security vulnerabilities for RSS Feed Widget. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

latest Jan 6, 2026

Vulnerabilities

CVE-2020-24314
Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside
Medium 6.1
CVE-2024-32690
WordPress RSS Feed Widget plugin <= 2.9.7 - Cross Site Scripting (XSS) vulnerability
Medium 5.9
CVE-2025-69349
WordPress RSS Feed Widget plugin <= 3.0.2 - Broken Access Control vulnerability
Medium 5.4
CVE-2024-10057
RSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos Shortcode
Medium 5.4