Skip to content
PluginCanary

Podlove Podcast Publisher

by Eric Teubert · 3,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 14 Oct 2026, 32 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for Podlove Podcast Publisher
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Quick answers

Is Podlove Podcast Publisher still maintained?
Yes. Last release 14 Oct 2026, 32 releases in the last 24 months. 14 Oct 2026 · wordpress.org
Who owns Podlove Podcast Publisher, and has it changed hands?
No change recorded. Main committer eteubert since Jun 2012. 3 Nov 2026 · SVN log
Was Podlove Podcast Publisher removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Podlove Podcast Publisher safe?
29 known vulnerabilities, all fixed (latest in 4.5.7). Not on the exploited list. 9 Oct 2026 · Wordfence Intelligence
Is the latest Podlove Podcast Publisher update safe to install?
No ownership change before 4.5.8. No one-star spike after it. 14 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
eteubert26 Jun 2012 to 14 Oct 2026, 999 commits

1 committer recorded. No ownership change since 2012.

Maintenance

Last release
21 days ago
Releases, 24 months
32
Tested up to
7.1 current
Requires PHP
8.0 supported 8.2+
Releases per quarter
Releases per quarter for Podlove Podcast Publisher
Q1 20248
Q2 20245
Q3 202484
Q4 202410
Q1 20255
Q2 20250
Q3 20253
Q4 20252
Q1 20266
Q2 20263
Q3 20266
Q4 20261

Last release 14 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.3.

Rating distribution
5 star36
4 star1
3 star1
2 star1
1 star6

Security record

14 vulnerabilities in 24 months (29 on record), all patched (latest fixed in 4.5.7).

Show 29 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
9 Oct 2026Podlove Podcast Publisher <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting via Auphonic Webhook7.2<= 4.5.64.5.7Patched before disclosure
8 Sep 2026Podlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter6.4<= 4.5.54.5.6Patched before disclosure
19 Aug 2026Podlove Podcast Publisher <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.5.44.5.5Patched before disclosure
15 Aug 2026Podlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter8.8<= 4.5.34.5.4Patched before disclosure
1 Aug 2026Podlove Podcast Publisher < 4.5.3 - Cross-Site Request Forgery4.3< 4.5.34.5.3Patched before disclosure
14 Jul 2026Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter9.8<= 4.5.14.5.2Patched before disclosure
8 Mar 2026Podlove Podcast Publisher <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.3.34.3.4Patched before disclosure
22 Sep 2025Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload9.8<= 4.2.64.2.7Patched before disclosure
27 Aug 2025Podlove Podcast Publisher <= 4.2.5 - Open Redirect6.1<= 4.2.54.2.6Patched before disclosure
5 Mar 2025Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function4.3<= 4.2.24.2.3Patched before disclosure
3 Mar 2025Podlove Podcast Publisher <= 4.1.23 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 4.1.234.1.24Patched before disclosure
3 Mar 2025Podlove Podcast Publisher <= 4.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 4.2.04.2.1Patched before disclosure
17 Jan 2025Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name4.4<= 4.1.254.2.0Patched before disclosure
11 Nov 2024Podlove Podcast Publisher <= 4.1.15 - Authenticated (Admin+) Remote Code Execution7.2<= 4.1.154.1.17Patched before disclosure
28 Aug 2024Podlove Podcast Publisher <= 4.1.13 - Cross-Site Request Forgery to Remote Code Execution8.8<= 4.1.134.1.14Patched before disclosure
28 Aug 2024Podlove Podcast Publisher <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.1.134.1.14Patched before disclosure
22 Apr 2024Podlove Podcast Publisher <= 4.0.11 - Authenticated (Contributor+) Server-Side Request Forgery4.3<= 4.0.114.0.1290
22 Apr 2024Podlove Podcast Publisher <= 4.0.14 - Cross-Site Request Forgery4.3<= 4.0.144.0.15Patched before disclosure
12 Apr 2024Podlove Podcast Publisher <= 4.0.12 - Authenticated (Contributor+) SQL Injection9.9<= 4.0.124.0.14100
12 Apr 2024Podlove Podcast Publisher <= 4.1.0 - Missing Authorization4.3<= 4.1.04.1.1Patched before disclosure
25 Mar 2024Podlove Podcast Publisher <= 4.0.9 - Reflected Cross-Site Scripting6.1<= 4.0.94.0.10118
6 Feb 2024Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export5.3<= 4.0.114.0.12166
6 Feb 2024Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings Import5.3<= 4.0.114.0.12166
10 Feb 2023Podlove Podcast Publisher <= 3.8.3 - Cross-Site Request Forgery4.3<= 3.8.33.8.4527
3 Feb 2023Podlove Podcast Publisher <= 3.8.2 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 3.8.23.8.3534

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

3,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Podlove Podcast Publisher
4 May 2026161
11 May 20263,214
18 May 2026616
25 May 2026382
1 Jun 20263,323
8 Jun 2026506
15 Jun 2026356
22 Jun 2026248
29 Jun 2026260
6 Jul 20263,480
13 Jul 20263,849
20 Jul 2026607
27 Jul 2026365
3 Aug 2026414
10 Aug 20263,331
17 Aug 20263,883
24 Aug 20263,378
31 Aug 2026636
7 Sep 2026454
14 Sep 2026457
21 Sep 20263,324
28 Sep 2026719
5 Oct 2026660
12 Oct 20263,556
19 Oct 2026809
26 Oct 2026738
2 Nov 202678

Weekly downloads over the last 4 weeks are 12% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

AudioIgniter Music PlayerScore 91 · 10,000+Compact WP Audio PlayerScore 90 · 20,000+Podcast PlayerScore 89 · 10,000+HTML5 Audio PlayerScore 87 · 10,000+

Facts

Version4.5.8
AuthorEric Teubert
Added26 Jun 2012
Last updated14 Oct 2026
Active installs3,000+
Requires WordPress5.7.0
Tested up to7.1.4
Requires PHP8.0
CategoryContent Management > Blog & Article Publishing
Tagsrss, audio, podcast, podlove, publishing

Other plugins by this author: No More Enclosures

Questions

Is Podlove Podcast Publisher still maintained?

Yes. Last release 14 Oct 2026, 32 releases in the last 24 months.

Who owns Podlove Podcast Publisher, and has it changed hands?

No change recorded. Main committer eteubert since Jun 2012.

Was Podlove Podcast Publisher removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Podlove Podcast Publisher safe?

29 known vulnerabilities, all fixed (latest in 4.5.7). Not on the exploited list.

Is the latest Podlove Podcast Publisher update safe to install?

No ownership change before 4.5.8. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue