Skip to content
PluginCanary

RSS Feed Widget

by Fahad Mahmood · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: RSS Feed Widget is maintained, has no open risk signals and no unpatched vulnerabilities.

90/ 100 Canary Score
Sub-scores for RSS Feed Widget
Ownership100
Maintenance100
Security95
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
fahadmahmood1 Feb 2014 to 30 Oct 2026, 139 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
3
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for RSS Feed Widget
Q1 20240
Q2 20242
Q3 20240
Q4 20242
Q1 20251
Q2 20250
Q3 20250
Q4 20251
Q1 20260
Q2 20260
Q3 20260
Q4 20261

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
7 Jan 2026RSS Feed Widget <= 3.0.2 - Missing Authorization4.3<= 3.0.23.0.30
22 Oct 2024RSS Feed Widget <= 3.0.0 - Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI']6.1<= 3.0.03.0.10
22 Oct 2024RSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.9.93.0.00
17 Oct 2024RSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos Shortcode6.4<= 2.9.93.0.00
19 Apr 2024RSS Feed Widget <= 2.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2.9.72.9.80
10 Aug 2020RSS Feed Widget <= 2.8.0 - Reflected Cross-Site Scripting6.1< 2.8.12.8.10

Source: Wordfence Intelligence.

Reputation

Lifetime rating 3.9 from 26 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star18
4 star0
3 star1
2 star1
1 star6

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for RSS Feed Widget
4 May 202695
11 May 202673
18 May 202674
25 May 2026104
1 Jun 202666
8 Jun 202670
15 Jun 202665
22 Jun 202649
29 Jun 2026105
6 Jul 202671
13 Jul 202673
20 Jul 202674
27 Jul 202695
3 Aug 202678
10 Aug 202663
17 Aug 202696
24 Aug 202664
31 Aug 202684
7 Sep 202683
14 Sep 2026103
21 Sep 2026108
28 Sep 2026120
5 Oct 202691
12 Oct 202689
19 Oct 2026147
26 Oct 20261,330
2 Nov 2026113

Weekly downloads over the last 4 weeks are 216% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

WebSub (FKA. PubSubHubbub)Score 91 · 100,000+Disable Feeds WPScore 91 · 10,000+RSS Includes PagesScore 91 · 10,000+Super RSS Reader - Add attractive RSS Feed WidgetScore 91 · 9,000+SmartFormat feed for SmartNewsScore 91 · 1,000+

Facts

Version4.0.0
AuthorFahad Mahmood
Added1 Feb 2014
Last updated30 Oct 2026
Active installs2,000+
Requires WordPress5.8
Tested up to7.1.4
Requires PHP7.4
CategoryContent Management > Blog & Article Publishing
Tagsrss, feed, slider, widget, shortcode

Other plugins by this author: WP Sort Order, WP Datepicker, WP Header Images, External Store for Shopify, Injection Guard, WP Docs, Stock Locations for WooCommerce, Products Coming Soon for WooCommerce, Easy Upload Files During Checkout, Export Customers Data, Export Variable Products, Alphabetic Pagination

Questions

Is RSS Feed Widget still maintained?

RSS Feed Widget was last updated on 30 Oct 2026. Its Canary status is Healthy.

Is RSS Feed Widget safe?

RSS Feed Widget has no open unpatched vulnerabilities on record. 1 vulnerability was published in the last 24 months. Its Canary status is Healthy.

Who owns RSS Feed Widget?

The wordpress.org author is Fahad Mahmood. Recent committers: fahadmahmood, plugin-master. We have recorded no ownership change.

What can I use instead of RSS Feed Widget?

Plugins in the same category with a higher Canary Score: WebSub (FKA. PubSubHubbub), Disable Feeds WP, RSS Includes Pages, Super RSS Reader - Add attractive RSS Feed Widget, SmartFormat feed for SmartNews.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue