RSS Feed Widget

by Fahad Mahmood

View on WordPress.org

69 Quality Score

Active Installs

15/30

With only 2,000 active installs, this is a relatively niche plugin with a small user base.

Update Freshness

20/25

Updated as recently as December 2025 and tested against WordPress 6.9.4, the maintenance signal is strong.

User Rating

12/15

A 78 out of 100 from 26 ratings is solid, though the small sample size limits confidence.

Support Health

8/15

Zero support threads opened or resolved is a yellow flag, though it can also indicate few problems have surfaced.

WP Compatibility

15/15

Tested with the latest WordPress and requiring only PHP 7.0, compatibility is broad and modern.

Scores higher than 22% of indexed plugins

About

RSS Feed Widget with customizable slider. Feed title, description, image, censorship and a few other features which you can use.

Active Installs 2k+

Rating ★★★½ 3.9/5

Last Updated 2025-12-19 9:06am GMT

Requires WordPress 3.0+

Tested Up To 6.9.7

Requires PHP 7.0+

Security History

6 known vulnerabilities, all patched

6 Medium

Most recent: January 7, 2026

View details ▸

RSS Feed Widget <= 3.0.2 - Missing Authorization Medium

January 7, 2026 Patched in ["3.0.3"] CVE-2025-69349

RSS Feed Widget <= 3.0.0 - Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI'] Medium

October 22, 2024 Patched in ["3.0.1"] CVE-2024-9835

RSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

October 22, 2024 Patched in ["3.0.0"] CVE-2024-9836

RSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos Shortcode Medium

October 17, 2024 Patched in ["3.0.0"] CVE-2024-10057

RSS Feed Widget <= 2.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

April 19, 2024 Patched in ["2.9.8"] CVE-2024-32690

RSS Feed Widget <= 2.8.0 - Reflected Cross-Site Scripting Medium

August 10, 2020 Patched in ["2.8.1"] CVE-2020-24314

What It Does

RSS Feed Widget is a sidebar widget that pulls external RSS feeds and displays them on your WordPress site. It includes a slider option, customizable feed titles and descriptions, image display, and basic censorship controls. The plugin is built for simple feed presentation rather than full content aggregation or auto-posting.

Who It's For

This plugin fits small sites that want a low-effort way to show curated RSS content in a widget area, such as niche interest sites, community portals, or small business blogs. It also works for users who need a slider-based display of feed items and want lightweight censorship controls without importing full posts.

Who Should Skip It

If you need automatic full-content import, multi-feed aggregation at scale, or reliable support, look elsewhere. Anyone running a serious news or magazine publication should skip this in favour of more established tools like WPeMatico or FeedWordPress.

The Bottom Line

RSS Feed Widget delivers on its narrow promise of a simple feed widget with slider and censorship options, and its recent updates are a plus. However, the tiny install base, zero support history, and lack of full-content import make it a secondary choice compared to WPeMatico or FeedWordPress for anyone with serious aggregation needs. Best suited for hobbyists or small sites that just need a tidy feed sidebar.

Pick this if you need to publish your own Google News compatible feeds rather than display external ones.

Disable Feeds WP 80/100

Choose this instead if your goal is to disable WordPress feed output entirely, not display external feeds.

WPeMatico RSS Feed Fetcher 80/100

Go with WPeMatico if you want full-post auto-import and campaign-based feed fetching at scale.

Podcast Importer SecondLine 78/100

Pick this if your feeds are podcasts and you need episode import and player integration.

FeedWordPress 78/100

Choose FeedWordPress if you need a mature aggregator that turns external feeds into full posts on your site.