FeedWordPress
Healthy: vulnerability published 30 Oct 2026, fixed in 2026.1016.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 2026.1016. Update to version 2026.1016 or later.30 Oct 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| radgeek | 21 Nov 2007 to 30 Oct 2026, 668 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 5 days ago
- Releases, 24 months
- 5
- Tested up to
- 7.1 current
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 0 |
| Q4 2024 | 1 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 0 |
| Q4 2026 | 2 |
Last release 30 Oct 2026. Tested with WordPress 7.1 (current).
Support
0% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 30 Oct 2026 | FeedWordPress <= 2026.0517 - Unauthenticated Stored Cross-Site Scripting via Syndicated Feed Content | 7.2 | <= 2026.0517 | 2026.1016 | 0 |
| 4 Mar 2024 | FeedWordPress <= 2022.0222 - Insecure Direct Object Referece | 5.3 | <= 2022.0222 | 2024.0428 | 56 |
| 18 Jan 2022 | FeedWordPress <= 2021.0713 - Reflected Cross-Site Scripting | 6.1 | <= 2021.0713 | 2022.0123 | 6 |
| 19 May 2015 | FeedWordPress < 2015.0514 - SQL Injection | 9.8 | < 2015.0514 | 2015.0514 | 0 |
| 14 May 2015 | FeedWordPress < 2015.0514 - Reflected Cross-Site Scripting | 6.1 | < 2015.0514 | 2015.0514 | 1 |
| 26 Apr 2015 | FeedWordPress < 2015.0426 - Cross-Site Scripting | 6.1 | <= 2014.0805 | 2015.0426 | 1 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.2 from 61 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 41 |
|---|---|
| 4 star | 8 |
| 3 star | 2 |
| 2 star | 3 |
| 1 star | 7 |
Momentum
8,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 127 |
|---|---|
| 11 May 2026 | 246 |
| 18 May 2026 | 3,505 |
| 25 May 2026 | 734 |
| 1 Jun 2026 | 470 |
| 8 Jun 2026 | 393 |
| 15 Jun 2026 | 384 |
| 22 Jun 2026 | 280 |
| 29 Jun 2026 | 314 |
| 6 Jul 2026 | 271 |
| 13 Jul 2026 | 337 |
| 20 Jul 2026 | 304 |
| 27 Jul 2026 | 309 |
| 3 Aug 2026 | 305 |
| 10 Aug 2026 | 286 |
| 17 Aug 2026 | 283 |
| 24 Aug 2026 | 264 |
| 31 Aug 2026 | 255 |
| 7 Sep 2026 | 255 |
| 14 Sep 2026 | 333 |
| 21 Sep 2026 | 290 |
| 28 Sep 2026 | 325 |
| 5 Oct 2026 | 301 |
| 12 Oct 2026 | 346 |
| 19 Oct 2026 | 575 |
| 26 Oct 2026 | 3,131 |
| 2 Nov 2026 | 291 |
Weekly downloads over the last 4 weeks are 97% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 2026.1030 |
|---|---|
| Author | C. Johnson |
| Added | 21 Nov 2007 |
| Last updated | 30 Oct 2026 |
| Active installs | 8,000+ |
| Requires WordPress | 6.2 |
| Tested up to | 7.1.4 |
| Requires PHP | not stated |
| Category | Content Management > Blog & Article Publishing |
| Tags | rss, Atom, feed, aggregation, syndication |
Other plugins by this author: Footnotes for WordPress, Humanized History for WordPress
Questions
Is FeedWordPress still maintained?
FeedWordPress was last updated on 30 Oct 2026. Its Canary status is Healthy.
Is FeedWordPress safe?
FeedWordPress has no open unpatched vulnerabilities on record. 1 vulnerability was published in the last 24 months. Its Canary status is Healthy.
Who owns FeedWordPress?
The wordpress.org author is C. Johnson. Recent committers: radgeek, plugin-master. We have recorded no ownership change.
What can I use instead of FeedWordPress?
Plugins in the same category with a higher Canary Score: WebSub (FKA. PubSubHubbub), Disable Feeds WP, RSS Includes Pages, Super RSS Reader - Add attractive RSS Feed Widget, SmartFormat feed for SmartNews.