Podlove Podcast Publisher

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 80% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ schaarsen

   2.0y ago

   If you want to start a podcast or if you are publishing one and want to migrate to a plugin that really works: Go for Podlove. It’s powerful, it sparks joy and the developer team and the community help gladly with problems.

   Read on wp.org ↗
2. ★★★★★ Eggi1972

   3.2y ago

   Für mich das beste Plugin für meinen Podcast!

   Read on wp.org ↗
3. ★★★★★ snack8290

   3.6y ago

   It’s been 2 days of 2 programmers trying to get the look of the demo. They still have not done it. AND they haven’t created an “archive” either. Something that normally takes less than an hour… they haven’t done because there is a massive learning curve / programming tweaks / edits using this plugin. I would NOT recommend this plugin.

   Read on wp.org ↗
4. ★★★★★ snack8290

   3.6y ago

   Set this up for a client but every page / every shortcode – there were bugs and design flaws. Very hard to use.

   Read on wp.org ↗
5. ★★★★★ tansandals

   3.7y ago

   This is one of the most solid podcast plugins out there. It’s cleanly coded, not a bunch of jenky ads all over the place, and does the job very well. One thing I’d love to see is the ability to have a Dashboard Widget of my stats when I login to my WordPress Dashboard (as opposed to the Podlove Dashboard). Plus, it would be amazing to have a way to have weekly podcast stats emailed to contributors! Thanks so much for your continued development of this fantastic plugin!

   Read on wp.org ↗
6. ★★★★★ sukhanov

   4.1y ago

   tried with wp 6.0

   Read on wp.org ↗
7. ★★★★★ Sven Wagener

   4.9y ago

   This is the most underused plugin for podcast publishing. I like it a lot! Thanks for your work!

   Read on wp.org ↗
8. ★★★★★ deroptiker

   5.4y ago

   Ich will nie wieder was anderes

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.5.3 security: sign image cache URLs, make unsigned legacy URLs cache-read-only, and add resource limits for image downloads and resizing. security: fix CSRF in contributors management UI (reported by Ryan Fabella) improve: f 4.5.3
2. — Version 4.5.2 security: Fixed CVE-2026-13001, a remote code execution vulnerability in the image cache caused by unsafe handling of cached image file extensions. improve: warning tool that detects issues in database migrations is now 4.5.2
3. — Version 4.5.1 improve: The “Get from Asset” transcript import has improved UX. It has a separate state when it is waiting for results, so it cannot accidentally be triggered multiple times. It is faster, through HTTP request optimizat 4.5.1
4. — Version 4.5.0 new: “Optimize HTML Content” in feed settings strips non-essential attributes from episode shownotes in the RSS feed new: show podcast guid in podcast settings new: use the show cover as episode image fallback before the 4.5.0
5. — Version 4.4.2 fix: Related Episodes selector shows labels again (regression from 4.4.0) 4.4.2
6. — Version 4.4.1 fix: Auphonic preset selector shows preset label again (regression from 4.4.0) 4.4.1

27 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 Podlove Podcast Publisher <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-08-19 CVE-2026-66615 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.5.4 Patched in 4.5.5
2. High · 8.8 Podlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter ↗
   2026-08-15 CVE-2026-16099 Deserialization of Untrusted Data Affects <= 4.5.3 Patched in 4.5.4
3. Medium · 4.3 Podlove Podcast Publisher < 4.5.3 - Cross-Site Request Forgery ↗
   2026-08-01 CVE-2026-13729 Cross-Site Request Forgery (CSRF) Affects < 4.5.3 Patched in 4.5.3
4. Critical · 9.8 Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter ↗
   2026-07-14 CVE-2026-13001 Improper Input Validation Affects <= 4.5.1 Patched in 4.5.2
5. Medium · 6.4 Podlove Podcast Publisher <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-03-08 CVE-2026-32448 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.3.3 Patched in 4.3.4
6. Critical · 9.8 Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload ↗
   2025-09-22 CVE-2025-10147 Unrestricted Upload of File with Dangerous Type Affects <= 4.2.6 Patched in 4.2.7
7. Medium · 6.1 Podlove Podcast Publisher <= 4.2.5 - Open Redirect ↗
   2025-08-27 CVE-2025-58204 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 4.2.5 Patched in 4.2.6
8. Medium · 4.3 Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function ↗
   2025-03-05 CVE-2025-1383 Cross-Site Request Forgery (CSRF) Affects <= 4.2.2 Patched in 4.2.3
9. Medium · 4.4 Podlove Podcast Publisher <= 4.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-03-03 CVE-2024-13730 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.0 Patched in 4.2.1
10. Medium · 4.4 Podlove Podcast Publisher <= 4.1.23 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-03-03 CVE-2024-13729 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.1.23 Patched in 4.1.24
11. Medium · 4.4 Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name ↗
    2025-01-17 CVE-2025-0554 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.1.25 Patched in 4.2.0
12. High · 7.2 Podlove Podcast Publisher <= 4.1.15 - Authenticated (Admin+) Remote Code Execution ↗
    2024-11-11 CVE-2024-52393 Improper Control of Generation of Code ('Code Injection') Affects <= 4.1.15 Patched in 4.1.17
13. High · 8.8 Podlove Podcast Publisher <= 4.1.13 - Cross-Site Request Forgery to Remote Code Execution ↗
    2024-08-28 CVE-2024-43984 Cross-Site Request Forgery (CSRF) Affects <= 4.1.13 Patched in 4.1.14
14. Medium · 6.4 Podlove Podcast Publisher <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-08-28 CVE-2024-43983 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.1.13 Patched in 4.1.14
15. Medium · 4.3 Podlove Podcast Publisher <= 4.0.11 - Authenticated (Contributor+) Server-Side Request Forgery ↗
    2024-04-22 CVE-2024-32812 Server-Side Request Forgery (SSRF) Affects <= 4.0.11 Patched in 4.0.12
16. Medium · 4.3 Podlove Podcast Publisher <= 4.0.14 - Cross-Site Request Forgery ↗
    2024-04-22 CVE-2024-32712 Missing Authorization Affects <= 4.0.14 Patched in 4.0.15
17. Critical · 9.9 Podlove Podcast Publisher <= 4.0.12 - Authenticated (Contributor+) SQL Injection ↗
    2024-04-12 CVE-2024-32139 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.0.12 Patched in 4.0.14
18. Medium · 4.3 Podlove Podcast Publisher <= 4.1.0 - Missing Authorization ↗
    2024-04-12 CVE-2024-32143 Missing Authorization Affects <= 4.1.0 Patched in 4.1.1
19. Medium · 6.1 Podlove Podcast Publisher <= 4.0.9 - Reflected Cross-Site Scripting ↗
    2024-03-25 CVE-2024-29915 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.0.9 Patched in 4.0.10
20. Medium · 5.3 Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings Import ↗
    2024-02-06 CVE-2024-1110 Missing Authorization Affects <= 4.0.11 Patched in 4.0.12
21. Medium · 5.3 Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export ↗
    2024-02-06 CVE-2024-1109 Missing Authorization Affects <= 4.0.11 Patched in 4.0.12
22. Medium · 4.3 Podlove Podcast Publisher <= 3.8.3 - Cross-Site Request Forgery ↗
    2023-02-10 CVE-2023-25472 Cross-Site Request Forgery (CSRF) Affects <= 3.8.3 Patched in 3.8.4
23. Medium · 4.4 Podlove Podcast Publisher <= 3.8.2 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-02-03 CVE-2023-25046 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.8.2 Patched in 3.8.3
24. Critical · 9.8 Podlove Podcast Publisher <= 3.5.5 - Unauthenticated SQL Injection ↗
    2021-08-24 CVE-2021-24666 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 3.5.6 Patched in 3.5.6
25. High · 8.0 Podlove Podcast Publisher <= 2.5.3 - Authenticated SQL Injection ↗
    2017-08-07 CVE-2017-12949 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 2.6.0 Patched in 2.6.0
26. High · 8.8 Podlove Podcast Publisher < 2.3.16 - SQL Injection ↗
    2016-12-14 CVE-2016-10942 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 2.3.16 Patched in 2.3.16
27. High · 8.8 Podlove Podcast Publisher < 2.3.16 - Cross-Site Request Forgery to Cross-Site Scripting ↗
    2016-09-16 CVE-2016-10941 Cross-Site Request Forgery (CSRF) Affects < 2.3.16 Patched in 2.3.16

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 127 languages, 0 at 90% or more

Plus 103 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-11-24 4K+ → 3K+ down after 137 days in tier
2. 2025-07-10 5K+ → 4K+ down after 467 days in tier
3. 2024-03-30 6K+ → 5K+ down after 315 days in tier
4. 2023-05-20 7K+ → 6K+ down after 1 days in tier
5. 2023-05-19 6K+ → 7K+ up after 2 days in tier
6. 2023-05-17 7K+ → 6K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Seriously Simple Podcasting 30K+ installs · 4.7★ · 2 shared tags A
• AudioIgniter Music Player 10K+ installs · 4.5★ · 2 shared tags A
• HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 10K+ installs · 4.6★ · 2 shared tags A
• Buzzsprout Podcasting 5K+ installs · 4.2★ · 2 shared tags A
• Podcast Importer SecondLine 4K+ installs · 4.4★ · 2 shared tags B
• Podlove Subscribe button 2K+ installs · 4.1★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Podlove Podcast Publisher into a readme, a review or a deck. It updates itself.

Podlove Podcast Publisher: 3K+ active installs, 4.4★ (44 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/podlove-podcasting-plugin-for-wordpress