Podlove Podcast Publisher

76 Quality Score

Active Installs

16/30

With only 3,000 active installs, it is a niche product, but the score is boosted to 52/30 likely due to how established the Podlove brand is in the European podcasting community.

Update Freshness

25/25

A perfect 100/25 maintenance score reflects consistent updates, with the last release on July 6, 2026, signaling an actively maintained codebase.

User Rating

13/15

An 88/100 from 44 ratings shows strong user satisfaction, though the small sample size limits how confidently this can be generalized.

Support Health

8/15

Support health lands at 50/15, reflecting just 1 thread on record (100% resolved), which is too thin a sample to draw meaningful conclusions about responsiveness.

WP Compatibility

15/15

Full marks on compatibility are justified, with WordPress 7.0 testing confirmed, a minimum requirement of 4.9.6, and PHP 8.0 or higher required.

Scores higher than 51% of indexed plugins

About

The one and only next generation podcast publishing system. Seriously. It's magical and sparkles a lot.

Active Installs 3k+

Rating ★★★★ 4.4/5

Last Updated 2026-09-26 6:49am GMT

Requires WordPress 5.7.0+

Tested Up To 7.1.2

Requires PHP 8.0+

Security History

28 known vulnerabilities, all patched

4 Critical 7 High 17 Medium

Most recent: September 8, 2026

View details ▸

Podlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter Medium

September 8, 2026 Patched in ["4.5.6"] CVE-2026-75966

Podlove Podcast Publisher <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting High

August 19, 2026 Patched in ["4.5.5"] CVE-2026-66615

Podlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter High

August 15, 2026 Patched in ["4.5.4"] CVE-2026-16099

Podlove Podcast Publisher < 4.5.3 - Cross-Site Request Forgery Medium

August 1, 2026 Patched in ["4.5.3"] CVE-2026-13729

Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter Critical

July 14, 2026 Patched in ["4.5.2"] CVE-2026-13001

Podlove Podcast Publisher <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

March 8, 2026 Patched in ["4.3.4"] CVE-2026-32448

Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload Critical

September 22, 2025 Patched in ["4.2.7"] CVE-2025-10147

Podlove Podcast Publisher <= 4.2.5 - Open Redirect Medium

August 27, 2025 Patched in ["4.2.6"] CVE-2025-58204

Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function Medium

March 5, 2025 Patched in ["4.2.3"] CVE-2025-1383

Podlove Podcast Publisher <= 4.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

March 3, 2025 Patched in ["4.2.1"] CVE-2024-13730

Podlove Podcast Publisher <= 4.1.23 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

March 3, 2025 Patched in ["4.1.24"] CVE-2024-13729

Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name Medium

January 17, 2025 Patched in ["4.2.0"] CVE-2025-0554

Podlove Podcast Publisher <= 4.1.15 - Authenticated (Admin+) Remote Code Execution High

November 11, 2024 Patched in ["4.1.17"] CVE-2024-52393

Podlove Podcast Publisher <= 4.1.13 - Cross-Site Request Forgery to Remote Code Execution High

August 28, 2024 Patched in ["4.1.14"] CVE-2024-43984

Podlove Podcast Publisher <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 28, 2024 Patched in ["4.1.14"] CVE-2024-43983

Podlove Podcast Publisher <= 4.0.11 - Authenticated (Contributor+) Server-Side Request Forgery Medium

April 22, 2024 Patched in ["4.0.12"] CVE-2024-32812

Podlove Podcast Publisher <= 4.0.14 - Cross-Site Request Forgery Medium

April 22, 2024 Patched in ["4.0.15"] CVE-2024-32712

Podlove Podcast Publisher <= 4.0.12 - Authenticated (Contributor+) SQL Injection Critical

April 12, 2024 Patched in ["4.0.14"] CVE-2024-32139

Podlove Podcast Publisher <= 4.1.0 - Missing Authorization Medium

April 12, 2024 Patched in ["4.1.1"] CVE-2024-32143

Podlove Podcast Publisher <= 4.0.9 - Reflected Cross-Site Scripting Medium

March 25, 2024 Patched in ["4.0.10"] CVE-2024-29915

Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings Import Medium

February 6, 2024 Patched in ["4.0.12"] CVE-2024-1110

Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export Medium

February 6, 2024 Patched in ["4.0.12"] CVE-2024-1109

Podlove Podcast Publisher <= 3.8.3 - Cross-Site Request Forgery Medium

February 10, 2023 Patched in ["3.8.4"] CVE-2023-25472

Podlove Podcast Publisher <= 3.8.2 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

February 3, 2023 Patched in ["3.8.3"] CVE-2023-25046

Podlove Podcast Publisher <= 3.5.5 - Unauthenticated SQL Injection Critical

August 24, 2021 Patched in ["3.5.6"] CVE-2021-24666

Podlove Podcast Publisher <= 2.5.3 - Authenticated SQL Injection High

August 7, 2017 Patched in ["2.6.0"] CVE-2017-12949

Podlove Podcast Publisher < 2.3.16 - SQL Injection High

December 14, 2016 Patched in ["2.3.16"] CVE-2016-10942

Podlove Podcast Publisher < 2.3.16 - Cross-Site Request Forgery to Cross-Site Scripting High

September 16, 2016 Patched in ["2.3.16"] CVE-2016-10941

What It Does

Podlove Podcast Publisher is a dedicated podcast hosting and publishing system for WordPress that manages episode metadata, generates standards-compliant RSS feeds, and integrates with analytics services. It bypasses the need for a third-party podcast host by storing audio files on your own server or media host and producing a fully-spec podcast feed. The plugin also offers per-episode tracking, chapter marks, and player customization.

Who It's For

This plugin is ideal for serious independent podcasters and podcast networks who want full control over their RSS feed, episode metadata, and analytics without paying for a third-party host. It suits users comfortable with feed configuration, audio hosting costs, and a more technical setup than typical podcast plugins. Small operations with a single show and minimal customization needs may find it overkill.

Who Should Skip It

Anyone wanting a quick, simple setup with zero feed fiddling should skip this, as it assumes familiarity with podcast specifications and WordPress feed templates. Users on very modest shared hosting with tight storage may struggle since the plugin expects you to host audio files yourself or via a media CDN.

The Bottom Line

Podlove Podcast Publisher is a high-quality, technically capable plugin that earns its reputation in serious podcasting circles, and the maintenance and compatibility scores suggest it is in excellent shape. Its overall quality score of 76.27 is held back by its small install base and limited support footprint, not by code quality. If you want maximum control over your podcast feed and analytics, and you do not mind the learning curve, it is a strong choice; otherwise Seriously Simple Podcasting or PowerPress are friendlier paths.

Related Plugins

Presto Player 84/100

Pick Presto Player instead if your priority is a modern, polished video and audio player with deep LMS and page builder integration rather than a full feed publishing stack.

Seriously Simple Podcasting 82/100

Choose Seriously Simple Podcasting if you want a lighter, more beginner-friendly podcast workflow with built-in support for major podcast hosts like Buzzsprout and Castos.

GN Publisher: Google News Compatible RSS Feeds 81/100

Opt for GN Publisher if your podcast needs are modest and your real concern is producing Google News compliant RSS feeds rather than full podcast publishing.

PowerPress Podcasting plugin by Blubrry 81/100

Go with PowerPress if you want the most widely adopted podcast plugin with tight Blubrry hosting integration and the largest community of users.

Disable Feeds WP 80/100

Pick Disable Feeds WP only when you need to turn WordPress feeds off entirely, which is the opposite use case from Podlove's feed-publishing focus.