WordPress plugin
R3W InstaFeed security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All R3W InstaFeed vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting ≤1.0No patch available | CVE-2024-13678 |
- Medium6.1Reflected Cross-Site Scripting
≤1.0No patch available
R3W InstaFeed: common questions
Does R3W InstaFeed have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in R3W InstaFeed: 1 medium. At least one is not fixed in the latest version.
How do I check which version of R3W InstaFeed I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent R3W InstaFeed vulnerability?
CVE-2024-13678, published Feb 4, 2025: R3W InstaFeed <= 1.0 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any R3W InstaFeed vulnerability listed in CISA KEV?
No. None of the known R3W InstaFeed vulnerabilities is currently listed in the CISA KEV catalog.