Skip to content
PluginCanary

Business Directory Plugin

Business Directory Plugin - Easy Listing & Member Directories for WordPress
by Strategy11 Team · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 20 Oct 2026, 23 releases in 24 months, no unpatched vulnerabilities.

88/ 100 Canary Score
Sub-scores for Business Directory Plugin
Ownership100
Maintenance100
Security60
Support100
ReputationNo data

How the score works

Quick answers

Is Business Directory Plugin still maintained?
Yes. Last release 20 Oct 2026, 23 releases in the last 24 months. 20 Oct 2026 · wordpress.org
Who owns Business Directory Plugin, and has it changed hands?
No change recorded. Main committer businessdirectoryplugin since Nov 2011. 4 Nov 2026 · SVN log
Was Business Directory Plugin removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Business Directory Plugin safe?
25 known vulnerabilities, all fixed (latest in 6.4.28). Not on the exploited list. 30 Sep 2026 · Wordfence Intelligence
Is the latest Business Directory Plugin update safe to install?
No ownership change before 6.4.29. No one-star spike after it. 20 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
businessdirectoryplugin22 Nov 2011 to 20 Oct 2026, 458 commits
sswells31 Aug 2020 to 11 Sep 2024, 64 commits
sorinmarta10 Feb 2026 to 10 Feb 2026, 2 commits

3 committers recorded. No ownership change since 2011.

Maintenance

Last release
15 days ago
Releases, 24 months
23
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Business Directory Plugin
Q1 20241
Q2 20244
Q3 20240
Q4 20245
Q1 20256
Q2 20252
Q3 20250
Q4 20253
Q1 20262
Q2 20262
Q3 20264
Q4 20261

Last release 20 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.6.

Average rating per quarter for Business Directory Plugin
Q1 20245.0
Q2 20245.0
Q4 20243.0
Q1 20251.5
Q2 20253.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20262.7

Average rating fell from 5.0 to 2.7 between Q1 2024 and Q2 2026.

Rating distribution
5 star428
4 star22
3 star8
2 star16
1 star30
Latest low reviews

Security record

15 vulnerabilities in 24 months (25 on record), all patched (latest fixed in 6.4.28).

Show 25 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Sep 2026Business Directory Plugin - Easy Listing & Member Directories for WordPress <= 6.4.27 - Authenticated (Administrator+) SQL Injection4.9<= 6.4.276.4.28Patched before disclosure
24 Sep 2026Business Directory Plugin - Easy Listing & Member Directories for WordPress <= 6.4.27 - Authenticated (Contributor+) Insecure Direct Object Reference4.3<= 6.4.276.4.28Patched before disclosure
3 Sep 2026Business Directory Plugin - Easy Listing & Member Directories for WordPress <= 6.4.26 - Missing Authorization5.3<= 6.4.266.4.27Patched before disclosure
3 Sep 2026Business Directory Plugin - Easy Listing & Member Directories for WordPress <= 6.4.26 - Unauthenticated Insecure Direct Object Reference5.3<= 6.4.266.4.27Patched before disclosure
12 Aug 2026Business Directory <= 6.4.25 - Unauthenticated Stored Cross-Site Scripting7.2<= 6.4.256.4.26Patched before disclosure
28 Jul 2026Business Directory Plugin - Easy Listing Directories for WordPress <= 6.4.24 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 6.4.246.4.25Patched before disclosure
29 Jun 2026Business Directory Plugin - Easy Listing Directories for WordPress <= 6.4.23 - Missing Authorization5.3<= 6.4.236.4.24Patched before disclosure
29 Jun 2026Business Directory Plugin - Easy Listing Directories for WordPress <= 6.4.22 - Unauthenticated Stored Cross-Site Scripting7.2<= 6.4.226.4.23Patched before disclosure
29 Jun 2026Business Directory Plugin - Easy Listing Directories for WordPress <= 6.4.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 6.4.226.4.23Patched before disclosure
17 Feb 2026Business Directory Plugin <= 6.4.20 - Missing Authorization to Unauthenticated Arbitrary Listing Modification5.3<= 6.4.206.4.21Patched before disclosure
17 Feb 2026Business Directory Plugin <= 6.4.21 - Unauthenticated SQL Injection via payment Parameter7.5<= 6.4.216.4.22Patched before disclosure
15 Dec 2025Business Directory <= 6.4.19 - Missing Authorization4.3<= 6.4.196.4.20Patched before disclosure
3 Dec 2025Business Directory <= 6.4.19 - Cross-Site Request Forgery4.3<= 6.4.196.4.20Patched before disclosure
19 Oct 2025Business Directory <= 6.4.18 - Missing Authorization4.3<= 6.4.186.4.192
12 Mar 2025Business Directory Plugin - Easy Listing Directories for WordPress <= 6.4.14 - Insecure Direct Object Reference to Listing Arbitrary Image Addition5.3<= 6.4.146.4.15Patched before disclosure
17 Jun 2024Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection7.4<= 6.4.36.4.4Patched before disclosure
21 May 2024Business Directory Plugin - Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter9.8<= 6.4.26.4.3Patched before disclosure
27 Dec 2023Business Directory Plugin <= 6.3.9 - Missing Authorization via dispatch5.4<= 6.3.96.3.10Patched before disclosure
28 Nov 2023Business Directory Plugin <= 6.3.10 - Cross-Site Request Forgery4.3<= 6.3.106.3.118
12 Apr 2021Business Directory Plugin <= 5.11.1 - Cross-Site Request Forgery to Arbitrary Payment History Update4.3<= 5.11.15.11.2Patched before disclosure
12 Apr 2021Business Directory Plugin - Easy Listing Directories for WordPress <= 5.11.1 - Cross-Site Request Forgery to Arbitrary Listing Export8.8<= 5.11.15.11.2Patched before disclosure
12 Apr 2021Business Directory Plugin <= 5.11.1 - Authenticated Stored Cross-Site Scripting5.4<= 5.11.15.11.2Patched before disclosure
11 Apr 2021Business Directory Plugin <= 5.11 - Authenticated PHP4 Upload7.2<= 5.115.11.1507
11 Apr 2021Business Directory Plugin < 5.11 - Cross-Site Request Forgery8.8<= 5.115.11.1507
11 Apr 2021Business Directory Plugin <= 5.10.1 - Cross-Site Request Forgery to Arbitrary File Upload8.8<= 5.10.15.11507

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 6 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Business Directory Plugin
4 May 2026530
11 May 2026902
18 May 20266,940
25 May 20261,239
1 Jun 2026966
8 Jun 2026798
15 Jun 2026701
22 Jun 2026604
29 Jun 2026948
6 Jul 20266,794
13 Jul 20261,248
20 Jul 2026973
27 Jul 20266,497
3 Aug 20262,020
10 Aug 20261,317
17 Aug 20261,372
24 Aug 20261,314
31 Aug 20267,363
7 Sep 20261,839
14 Sep 20261,934
21 Sep 20266,633
28 Sep 20261,647
5 Oct 20261,729
12 Oct 2026965
19 Oct 20267,186
26 Oct 20262,780
2 Nov 2026340

Weekly downloads over the last 4 weeks are 13% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

WP Job ManagerScore 98 · 70,000+Simple Job BoardScore 96 · 10,000+HireZootScore 94 · 30,000+

Facts

Version6.4.29
AuthorStrategy11 Team
Added22 Nov 2011
Last updated20 Oct 2026
Active installs10,000+
Requires WordPress5.9
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagslisting manager, directory plugin, member directory, company directory, business directory

Other plugins by this author: Formidable Forms - Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder, AWP Classifieds, Contact Form 7 Widget, Tasty Recipes Lite - WordPress Recipe Card Plugin with Built-In Recipe Schema, Contact Form Migrator from Gravity Forms to Formidable, Contact Form Migrator from Pirate Forms to Formidable

Questions

Is Business Directory Plugin still maintained?

Yes. Last release 20 Oct 2026, 23 releases in the last 24 months.

Who owns Business Directory Plugin, and has it changed hands?

No change recorded. Main committer businessdirectoryplugin since Nov 2011.

Was Business Directory Plugin removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Business Directory Plugin safe?

25 known vulnerabilities, all fixed (latest in 6.4.28). Not on the exploited list.

Is the latest Business Directory Plugin update safe to install?

No ownership change before 6.4.29. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue