Skip to content
PluginCanary

RSS Aggregator by Feedzy

RSS Aggregator by Feedzy - Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
by Themeisle · 40,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 19 Oct 2026, 36 releases in 24 months, no unpatched vulnerabilities.

83/ 100 Canary Score
Sub-scores for RSS Aggregator by Feedzy
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Quick answers

Is RSS Aggregator by Feedzy still maintained?
Yes. Last release 19 Oct 2026, 36 releases in the last 24 months. 19 Oct 2026 · wordpress.org
Who owns RSS Aggregator by Feedzy, and has it changed hands?
No change recorded. Main committer themeisle since Apr 2016. 3 Nov 2026 · SVN log
Was RSS Aggregator by Feedzy removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is RSS Aggregator by Feedzy safe?
19 known vulnerabilities, all fixed (latest in 5.2.13). Not on the exploited list. 28 Oct 2026 · Wordfence Intelligence
Is the latest RSS Aggregator by Feedzy update safe to install?
No ownership change before 5.2.13. No one-star spike after it. 19 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
themeisle25 Apr 2016 to 19 Oct 2026, 151 commits
codeinwp3 Jan 2017 to 24 Dec 2020, 94 commits

2 committers recorded. No ownership change since 2014.

Maintenance

Last release
16 days ago
Releases, 24 months
36
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for RSS Aggregator by Feedzy
Q1 20247
Q2 20244
Q3 20243
Q4 20243
Q1 20254
Q2 20253
Q3 20255
Q4 20252
Q1 20260
Q2 20269
Q3 20268
Q4 20263

Last release 19 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.6.

Average rating per quarter for RSS Aggregator by Feedzy
Q2 20244.5
Q3 20244.4
Q4 20244.8
Q1 20255.0
Q3 20253.0
Q4 20252.5
Q1 20265.0
Q3 20265.0

Average rating rose from 4.5 to 5.0 between Q2 2024 and Q3 2026.

Rating distribution
5 star306
4 star20
3 star9
2 star9
1 star17
Latest low reviews

Security record

9 vulnerabilities in 24 months (19 on record), all patched (latest fixed in 5.2.13).

Show 19 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026RSS Aggregator by Feedzy <= 5.2.12 - Unauthenticated Stored Cross-Site Scripting via YouTube media:description Feed Element4.7<= 5.2.125.2.13Patched before disclosure
15 Oct 2026RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URL7.2<= 5.2.115.2.12Patched before disclosure
9 Oct 2026RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS <title>6.4<= 5.2.105.2.11Patched before disclosure
6 Aug 2026RSS Aggregator by Feedzy <= 5.2.5 - Missing Authorization to Authenticated (Author+) Cross-User Import Job Manipulation and Post Deletion4.3<= 5.2.55.2.6Patched before disclosure
27 Jul 2026Feedzy <= 5.2.4 - Authenticated (Contributor+) Server-Side Request Forgery6.4<= 5.2.45.2.5Patched before disclosure
1 Jul 2026RSS Aggregator by Feedzy <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aspectRatio' Attribute6.4<= 5.2.15.2.2Patched before disclosure
5 Jun 2026RSS Aggregator by Feedzy <= 5.1.7 - Missing Authorization to Authenticated (Contributor+) Import Job Creation, Execution, Purge, Log Clearing, and Information Disclosure via Multiple AJAX Sub-Actions4.3<= 5.1.75.1.8Patched before disclosure
10 Dec 2025RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 5.1.1 - Unauthenticated Blind Server-Side Request Forgery5.8<= 5.1.15.1.2Patched before disclosure
22 Oct 2025Feedzy RSS Feeds Lite <= 5.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery5<= 5.1.05.1.1Patched before disclosure
16 Apr 2024RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.7 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF)6.4<= 4.4.74.4.8Patched before disclosure
6 Apr 2024RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Error Message6.4<= 4.3.34.3.4Patched before disclosure
9 Feb 2024RSS Aggregator by Feedzy <= 4.4.2 - Missing Authorization to Arbitrary Page Creation and Publication6.5<= 4.4.24.4.31
9 Feb 2024RSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL Injection8.8<= 4.4.24.4.31
2 Feb 2024RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.1 - Missing Authorization4.3<= 4.4.14.4.2Patched before disclosure
1 Feb 2024ThemeIsle SDK <= Various Versions - Missing Authorization5.3<= 4.4.14.4.21
5 Jan 2024RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Missing Authorization5.4<= 4.3.24.3.3Patched before disclosure
5 Jan 2024RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 4.3.24.3.3Patched before disclosure
4 Jan 2023RSS Aggregator by Feedzy <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 4.1.04.1.1Patched before disclosure
16 Sep 2020RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass4.3< 3.4.33.4.3Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

40,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for RSS Aggregator by Feedzy
4 May 20261,984
11 May 20263,028
18 May 202622,744
25 May 202637,417
1 Jun 20265,337
8 Jun 20264,892
15 Jun 20262,880
22 Jun 202631,965
29 Jun 202623,475
6 Jul 20267,305
13 Jul 20262,975
20 Jul 202634,995
27 Jul 202623,341
3 Aug 202623,114
10 Aug 202620,697
17 Aug 20266,084
24 Aug 20263,858
31 Aug 20262,865
7 Sep 202620,570
14 Sep 20265,345
21 Sep 20263,852
28 Sep 202618,943
5 Oct 202624,259
12 Oct 202622,680
19 Oct 202622,296
26 Oct 20267,400
2 Nov 2026597

Weekly downloads over the last 4 weeks are 7% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

WebSub (FKA. PubSubHubbub)Score 91 · 100,000+Disable Feeds WPScore 91 · 10,000+RSS Includes PagesScore 91 · 10,000+Featured Images in RSS for MailchimpScore 90 · 20,000+WP RSS AggregatorScore 86 · 40,000+

Facts

Version5.2.13
AuthorThemeisle
Added3 Nov 2014
Last updated19 Oct 2026
Active installs40,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.2
CategoryE-commerce & Shopping
Tagsrss import, autoblogging, feed to post, rss aggregator, news aggregator

Other plugins by this author: LightStart - Maintenance Mode, Coming Soon and Landing Page Builder, Otter Blocks - Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE, Redirection for Contact Form 7, Menu Icons by Themeisle - Add Icons to Navigation Menus, Disable Admin Notices - Hide Dashboard Notifications, Starter Sites & Templates by Neve, Robin Image Optimizer - Unlimited Image Optimization, WebP & AVIF, Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More, Titan Anti-spam & Security - Brute Force Protection, 2FA & Spam Filter, Woody Code Snippets - Insert PHP, CSS, JS, and Header/Footer Scripts, Remove Category URL - Remove ‘category’ base from category permalinks, Auto Featured Image (Auto Post Thumbnail)

Questions

Is RSS Aggregator by Feedzy still maintained?

Yes. Last release 19 Oct 2026, 36 releases in the last 24 months.

Who owns RSS Aggregator by Feedzy, and has it changed hands?

No change recorded. Main committer themeisle since Apr 2016.

Was RSS Aggregator by Feedzy removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is RSS Aggregator by Feedzy safe?

19 known vulnerabilities, all fixed (latest in 5.2.13). Not on the exploited list.

Is the latest RSS Aggregator by Feedzy update safe to install?

No ownership change before 5.2.13. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue