WordPress plugin
RSS Feed Retriever security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All RSS Feed Retriever vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery ≤1.6.7Update to 1.6.8 | — | |
| Medium5.4 | Missing Authorization ≤1.6.7Update to 1.6.8 | — |
- Medium4.3Cross-Site Request Forgery
≤1.6.7Update to 1.6.8
- Medium5.4Missing Authorization
≤1.6.7Update to 1.6.8
RSS Feed Retriever: common questions
Does RSS Feed Retriever have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in RSS Feed Retriever: 2 medium. None are known to affect version null.
How do I check which version of RSS Feed Retriever I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent RSS Feed Retriever vulnerability?
62559fd6-a338-4f0f-ab1a-33fffbdc687e, published Jan 4, 2023: WordPress RSS Feed Retriever <= 1.6.7 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any RSS Feed Retriever vulnerability listed in CISA KEV?
No. None of the known RSS Feed Retriever vulnerabilities is currently listed in the CISA KEV catalog.