WP Podcasts Manager
WP Podcasts Manager has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for WP Podcasts Manager has a vendor fix available, so running the current release closes it.
All of these findings were reported by ch4r0n. WP Podcasts Manager is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-47597WP Podcasts Manager <= 1.3 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
WP Podcasts Manager
Author
Maulik Vora
Sync Podcast RSS feeds with your WordPress website automatically. The WP Podcast Manager plugin helps to easily import podcasts into WordPress. WP Podcast Manager provides an easy way to show and play Anchor.fm, Podbean, Apple, Google, Acast, Simplecast, Buzzsprout & Spotify podcasts using the podcasting feed URL. WP Podcast manager plugin is to Publish and manage your podcast directly from your WordPress website. It is a must have plugin for your podcast website. Give your listeners easy access to all your episodes from any page or even from all the pages of your website. The plugin supports importing episodes as a custom post type, assigning categories, importing featured images, and more. Key Features Very easy process to setup Fetch all required details from the feed URL Option to set PostType & Category while import Option to modify fetched details of your podcast Easily add new custom podcast by podcast link Complete Shortcode to display podcasts in any pages – [zl_podcast cat=’cat1, cat2′ limit=10] Responsive layout for all device sizes Assign category for the individual podcast in import time Assign/Change Podcast author easily Show/Hide Podcasts easily Set cron time to fetch the new podcast every X minutes Set the position of the podcast player after content or before content Set the Archive page slug Import from multiple RSS feed URLs at once Episode featured images imported automatically from the feed’s artwork Episode duration, season and episode number imported and displayed Live progress bar for manual imports (“Save & Run Now”) Podcast List block for the block editor, wrapping the [zl_podcast] shortcode
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C