Description
Ecomrank Publisher is the official connector for the Ecomrank SaaS (https://ecomrank.io). It links your WordPress or WooCommerce store to Ecomrank so it can automatically publish articles optimized for SEO and GEO (Generative Engine Optimization), built from your product catalogue.
It is the WordPress equivalent of the Ecomrank Shopify app: a lightweight connector that holds a secure key and turns publish calls from Ecomrank into real WordPress posts, complete with featured image, categories, tags, SEO meta and structured data (JSON-LD).
Self-sufficient for SEO
The plugin manages the meta title, meta description and JSON-LD markup itself. No third-party SEO plugin is required. If Yoast, Rank Math, All in One SEO, SEOPress or The SEO Framework is already installed, Ecomrank writes into their fields and steps back to avoid duplicate tags.
Features
- One-click connection from Ecomrank (the key travels server to server, never through the browser)
- Manual API-key connection as a fallback
- Idempotent publishing: re-publishing the same article updates the existing post instead of creating a duplicate
- Featured image imported from Ecomrank into the media library
- Categories and tags created on the fly
- Native SEO meta and JSON-LD, or integration with the detected SEO plugin
- Scheduling (future publish date)
External services
This plugin connects your site to Ecomrank, the SaaS that generates and schedules your articles. It is required for the plugin to do anything: the plugin is only the connector that receives publish instructions from your Ecomrank account.
What data is sent, and when:
- When you connect (one-click or manual): the plugin sends your site URL, a secret key it generates on your site, the plugin version, and the list of SEO plugins detected on your site. This lets Ecomrank authenticate future requests to your site.
- When Ecomrank publishes an article, it sends the article content to your site over the plugin’s authenticated REST endpoint (title, body, excerpt, categories, tags, SEO meta, structured data, and a featured image URL). The plugin then downloads that image URL into your media library.
- If WooCommerce is active, Ecomrank can read your published product catalogue (name, description, price, images, categories and tags) through an authenticated endpoint, so it can write content about your products. No customer or order data is read or sent.
The service is provided by Ecomrank. Using it requires an Ecomrank account.
- Service: Ecomrank, https://ecomrank.io
- Terms of Service: https://ecomrank.io/legal/terms
- Privacy Policy: https://ecomrank.io/legal/privacy
Installation
- Upload the
ecomrank-publisherfolder to/wp-content/plugins/, or install the .zip from Plugins > Add New. - Activate the plugin.
- Go to the «Ecomrank» menu and click «Connect to Ecomrank» (or copy the key and the site URL into Ecomrank).
FAQ
-
Do I need Yoast or another SEO plugin?
-
No. Ecomrank Publisher handles SEO on its own. SEO plugin detection is only used to avoid duplicate tags if you already have one.
-
Is the API key exposed?
-
During the one-click connection, the key is sent server to server to Ecomrank and never travels through the URL or the browser.
-
Do I need an Ecomrank account?
-
Yes. The plugin is a connector to the Ecomrank service and does nothing on its own. See the «External services» section above.
-
What happens to my posts if I uninstall the plugin?
-
Articles already published stay on your site. Uninstalling only removes the plugin’s own settings (the connection key and status), never your content.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Ecomrank Publisher” is open source software. The following people have contributed to this plugin.
Contributors
Translate “Ecomrank Publisher” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.2
- WordPress.org release: readme rewritten in English, external services disclosure added.
- Compatibility: tested up to WordPress 7.0, minimum PHP lowered to 7.0.
- Security: the featured-image import now re-applies the SSRF guard to every HTTP redirect hop (blocks a public URL that redirects to an internal or cloud-metadata address), not just the initial URL.
- Use
wp_delete_file()instead ofunlink()when cleaning up temporary image downloads. - Housekeeping: prefixed internal variable names, packaging cleanup.
1.0.1
- Security: anti-SSRF guard on featured-image import (rejects internal hosts / private IPs).
- Security:
/editcan now only modify posts created by the plugin. - Security: the public
/capabilitiesendpoint no longer exposes WordPress / PHP versions to unauthenticated callers. - Security:
localhostremoved from the connection allowlist in production (dev only, under WP_DEBUG). - Hardening: explicit
wp_kses_postfiltering of content, sanitization of mirrored SEO fields.
1.0.0
- Initial release: REST endpoints (capabilities, test-connection, submit, edit, posts), one-click connect, multi-plugin SEO adapter.