Skip to content
PluginCanary

Contact List

Contact List - Online Staff Directory & Address Book
by Anssi Laitila · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 21 Oct 2026, 44 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for Contact List
Ownership100
Maintenance100
Security85
Support70
Reputation70

How the score works

Quick answers

Is Contact List still maintained?
Yes. Last release 21 Oct 2026, 44 releases in the last 24 months. 21 Oct 2026 · wordpress.org
Who owns Contact List, and has it changed hands?
No change recorded. Main committer anssilaitila since Jul 2018. 3 Nov 2026 · SVN log
Was Contact List removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Contact List safe?
5 known vulnerabilities, all fixed (latest in 3.0.19). Not on the exploited list. 20 Mar 2026 · Wordfence Intelligence
Is the latest Contact List update safe to install?
No ownership change before 3.0.23. No one-star spike after it. 21 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
anssilaitila15 Jul 2018 to 21 Oct 2026, 375 commits

1 committer recorded. No ownership change since 2018.

Maintenance

Last release
14 days ago
Releases, 24 months
44
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for Contact List
Q1 20240
Q2 20240
Q3 202440
Q4 20240
Q1 20250
Q2 20250
Q3 20251
Q4 20252
Q1 20262
Q2 202637
Q3 20261
Q4 20261

Last release 21 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Rating distribution
5 star18
4 star0
3 star0
2 star0
1 star1

Security record

1 vulnerability in 24 months (5 on record), patched (latest fixed in 3.0.19).

Show 5 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
20 Mar 2026Contact List <= 3.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_cl_map_iframe' Parameter6.4<= 3.0.183.0.19Patched before disclosure
9 May 2024Contact List - Easy Business Directory, Staff Directory and Address Book Plugin <= 2.9.87 - Missing Authorization to Notice Dismissal5.3<= 2.9.872.9.88765
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.12.9.24 to 2.9.692.9.72378
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 2.9.502.9.50879
24 Aug 2021Contact List - Easy Business Directory, Staff Directory and Address Book Plugin <= 2.9.41 - Reflected Cross-Site Scripting6.1<= 2.9.412.9.421071

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Contact List
4 May 202665
11 May 2026142
18 May 2026154
25 May 2026118
1 Jun 202688
8 Jun 2026113
15 Jun 202688
22 Jun 202697
29 Jun 202676
6 Jul 202694
13 Jul 202694
20 Jul 202686
27 Jul 2026125
3 Aug 2026223
10 Aug 2026933
17 Aug 2026467
24 Aug 2026254
31 Aug 2026241
7 Sep 2026246
14 Sep 2026236
21 Sep 2026231
28 Sep 2026269
5 Oct 2026268
12 Oct 2026237
19 Oct 20261,084
26 Oct 2026462
2 Nov 202659

Weekly downloads over the last 4 weeks are 90% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Simple Job BoardScore 92 · 10,000+HireZootScore 91 · 30,000+WP Job ManagerScore 90 · 70,000+

Facts

Version3.0.23
AuthorAnssi Laitila
Added15 Jul 2018
Last updated21 Oct 2026
Active installs1,000+
Requires WordPress6.2
Tested up to7.1.4
Requires PHP7.2
CategoryContent Management > Document Management & Downloads
Tagsstaff, listings, directory, address book, staff directory

Other plugins by this author: Shared Files - File Upload & Download Manager

Questions

Is Contact List still maintained?

Yes. Last release 21 Oct 2026, 44 releases in the last 24 months.

Who owns Contact List, and has it changed hands?

No change recorded. Main committer anssilaitila since Jul 2018.

Was Contact List removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Contact List safe?

5 known vulnerabilities, all fixed (latest in 3.0.19). Not on the exploited list.

Is the latest Contact List update safe to install?

No ownership change before 3.0.23. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue