Broadstreet

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 78% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

1. ★★★★★ petezeiry

   7.8y ago

   Is it a service you pay for? Or just a standalone directory?

   Read on wp.org ↗
2. ★★★★★ SteveO

   11.6y ago

   It seems to me these guys under-promise and over-deliver. Customer service at it’s best… and a great product. :_)

   Read on wp.org ↗

11 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Broadstreet <= 1.52.2 - Authenticated (Subscriber+) Private Post Meta Disclosure via get_sponsored_meta ↗
   2026-05-20 CVE-2026-1881 Authorization Bypass Through User-Controlled Key Affects <= 1.52.2 Patched in 1.53.2
2. Medium · 4.3 Broadstreet <= 1.53.1 - Missing Authorization to Authenticated (Subscriber+) Advertiser Creation ↗
   2026-05-12 CVE-2025-9988 Improper Authorization Affects <= 1.53.1 Patched in 1.53.2
3. Medium · 5.3 Broadstreet <= 1.53.1 - Authenticated (Subscriber+) Information Disclosure ↗
   2026-05-12 CVE-2025-9987 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.53.1 Patched in 1.53.2
4. Medium · 4.4 Broadstreet <= 1.53.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2026-05-12 CVE-2025-9989 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.53.1 Patched in 1.53.2
5. Medium · 4.3 Broadstreet Ads <= 1.52.2 - Missing Authorization ↗
   2026-02-21 CVE-2026-45210 Missing Authorization Affects <= 1.52.2 Patched in 1.53.2
6. Medium · 4.3 Broadstreet Ads <= 1.52.1 - Missing Authorization ↗
   2026-01-19 CVE-2025-69311 Missing Authorization Affects <= 1.52.1 Patched in 1.52.2
7. Medium · 6.1 Broadstreet Ads <= 1.51.7 - Reflected Cross-Site Scripting ↗
   2025-05-29 CVE-2025-4652 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.51.7 Patched in 1.51.8
8. Medium · 6.4 Broadstreet <= 1.51.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-05-16 CVE-2025-48113 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.51.2 Patched in 1.51.3
9. Medium · 6.4 Broadstreet <= 1.52.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2025-04-07 CVE-2025-32211 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.52.1 Patched in 1.52.2
10. Medium · 4.3 Broadstreet <= 1.51.1 - Cross-Site Request Forgery ↗
    2025-04-04 CVE-2025-32270 Cross-Site Request Forgery (CSRF) Affects <= 1.51.1 Patched in 1.52.2
11. Medium · 6.4 Broadstreet <= 1.51.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via zone Parameter ↗
    2025-01-24 CVE-2024-11825 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.51.0 Patched in 1.51.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-29 700+ → 800+ up after 339 days in tier
2. 2025-09-24 600+ → 700+ up after 1 days in tier
3. 2025-09-23 700+ → 600+ down after 4 days in tier
4. 2025-09-19 600+ → 700+ up after 1 days in tier
5. 2025-09-18 700+ → 600+ down after 9 days in tier
6. 2025-09-09 600+ → 700+ up after 8 days in tier
7. 2025-09-01 700+ → 600+ down after 3 days in tier
8. 2025-08-29 600+ → 700+ up after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WP User Avatars 20K+ installs · 4.3★ · 1 shared tag B
• Local Pickup for WooCommerce 1K+ installs · 4.1★ · 1 shared tag B
• Grabber for QQWorld Auto Save Images 400+ installs · 4.0★ · 1 shared tag D
• N NOAA Weather 200+ installs · 4.1★ · 1 shared tag D
• R Republication Tracker Tool 200+ installs · 3.6★ · 1 shared tag B
• 5 51Blocks JSON Schema Generator 100+ installs · 4.2★ · 1 shared tag D

Embed this report card

Drop a live Pulse card for Broadstreet into a readme, a review or a deck. It updates itself.

Broadstreet: 800+ active installs, 5.0★ (2 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/broadstreet