Skip to content
PluginCanary

Directorist: AI-Powered Business Directory, Listings & Classified Ads

by wpWax · 20,000+ active installs · Checked 3 Nov 2026
Healthy10 Warnings

Healthy: vulnerability published 13 Oct 2026, fixed in 8.10.3.

84/ 100 Canary Score
Sub-scores for Directorist: AI-Powered Business Directory, Listings & Classified Ads
Ownership100
Maintenance100
Security60
Support78
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 8.10.3. Update to version 8.10.3 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 8.10.3. Update to version 8.10.3 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 21 Sep 2026, fixed in 8.9.5. Update to version 8.9.5 or later.21 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 21 Sep 2026, fixed in 8.9.5. Update to version 8.9.5 or later.21 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 21 Sep 2026, fixed in 8.9.5. Update to version 8.9.5 or later.21 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 21 Sep 2026, fixed in 8.9.5. Update to version 8.9.5 or later.21 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 21 Sep 2026, fixed in 8.9.5. Update to version 8.9.5 or later.21 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 21 Sep 2026, fixed in 8.9.5. Update to version 8.9.5 or later.21 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 4 Sep 2026, fixed in 8.9. Update to version 8.9 or later.4 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 28 Aug 2026, fixed in 8.9.3. Update to version 8.9.3 or later.28 Aug 2026Evidence
  • InfoSEC-319 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
aazztech27 Aug 2017 to 20 Dec 2020, 138 commits
rafiq9131 Dec 2020 to 4 Nov 2026, 206 commits
armanul9428 Apr 2021 to 24 May 2021, 2 commits
obiplabon19 Jan 2022 to 19 Jan 2022, 1 commits

4 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
3 days ago
Releases, 24 months
80
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Directorist: AI-Powered Business Directory, Listings & Classified Ads
Q1 20244
Q2 20246
Q3 20246
Q4 202414
Q1 20256
Q2 20255
Q3 20255
Q4 20259
Q1 202612
Q2 202611
Q3 202612
Q4 20269

Last release 1 Nov 2026. Tested with WordPress 7.1 (current).

Support

78% of 9 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
13 Oct 2026Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing Field6.4<= 8.10.2.18.10.30
13 Oct 2026Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter8.1<= 8.10.2.18.10.30
21 Sep 2026Directorist <= 8.9.4 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3<= 8.9.48.9.50
21 Sep 2026Directorist 3.1.0 - 8.9.4 - Missing Authorization4.33.1.0 to 8.9.48.9.50
21 Sep 2026Directorist 8.1 - 8.9.4 - Unauthenticated Information Exposure5.38.1 to 8.9.48.9.50
21 Sep 2026Directorist 8.9.1 - 8.9.4 - Missing Authorization4.38.9.1 to 8.9.48.9.50
21 Sep 2026Directorist <= 8.9.4 - Authenticated (Subscriber+) Server-Side Request Forgery6.4<= 8.9.48.9.50
21 Sep 2026Directorist 8.5 - 8.9.4 - Authenticated (Subscriber+) Insecure Direct Object Reference4.38.5 to 8.9.48.9.50
4 Sep 2026Directorist: AI-Powered Business Directory, Listings & Classified Ads < 8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3< 8.98.90
28 Aug 2026Directorist: AI-Powered Business Directory, Listings & Classified Ads 8.5 - 8.9.2 - Authenticated (Subscriber+) Arbitrary Image Move4.38.5 to 8.9.28.9.30
9 Jul 2026Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.8.2 - Authenticated (Subscriber+) PHP Object Injection7.5<= 8.8.28.8.30
22 Feb 2026Directorist <= 8.5.10 - Missing Authorization5.3<= 8.5.108.6.116
27 Jan 2026Directorist <= 8.6.6 - Missing Authorization4.3<= 8.6.68.6.770
15 Dec 2025Directorist <= 8.6.6 - Unauthenticated Open Redirect5.8<= 8.6.68.6.7113
18 Nov 2025Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.5.2 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update6.5<= 8.5.28.5.30
24 Oct 2025Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move8.1<= 8.4.88.4.90
24 Mar 2025Directorist <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing5.3<= 8.28.30
27 Feb 2025Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP8.1<= 8.18.20
31 Jan 2025Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure5.3<= 8.0.128.10
29 Apr 2024Directorist <= 7.8.6 - Missing Authorization5.3<= 7.8.67.9.00
12 Feb 2024Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change5.3<= 7.8.47.8.50
5 Sep 2023Directorist <= 7.7.1 - CSV Injection3.8<= 7.7.17.7.27
1 Jun 2023Directorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation8.8<= 7.5.47.5.51
1 Jun 2023Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task6.5<= 7.5.47.5.51
10 May 2023Directorist <= 7.5.3 - Authenticated (Administrator+) Local File Inclusion7.2<= 7.5.37.5.40

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Directorist: AI-Powered Business Directory, Listings & Classified Ads
Q3 20255.0
Q4 20255.0
Q1 20263.8
Q2 20264.4
Q3 20264.6

Average rating fell from 5.0 to 4.6 between Q3 2025 and Q3 2026.

Rating distribution
5 star611
4 star20
3 star17
2 star7
1 star43
Latest low reviews

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Directorist: AI-Powered Business Directory, Listings & Classified Ads
4 May 20261,161
11 May 20262,044
18 May 202615,706
25 May 20262,230
1 Jun 20261,880
8 Jun 20268,760
15 Jun 20262,194
22 Jun 20261,785
29 Jun 202621,340
6 Jul 202617,541
13 Jul 202617,476
20 Jul 20265,715
27 Jul 202610,763
3 Aug 20267,788
10 Aug 20265,800
17 Aug 20262,101
24 Aug 20262,817
31 Aug 20269,877
7 Sep 20262,562
14 Sep 202612,903
21 Sep 20269,763
28 Sep 20269,308
5 Oct 202613,810
12 Oct 202611,390
19 Oct 20266,564
26 Oct 202615,714
2 Nov 20262,614

Weekly downloads over the last 4 weeks are 11% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Simple Job BoardScore 92 · 10,000+HireZoot - Job Listings, Career Page & Recruitment ToolScore 91 · 30,000+HivePress MessagesScore 91 · 7,000+HivePress ReviewsScore 91 · 7,000+HivePress FavoritesScore 91 · 7,000+

Facts

Version8.10.7
AuthorwpWax
Added27 Aug 2017
Last updated1 Nov 2026
Active installs20,000+
Requires WordPress4.6
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagslistings, directory, classifieds, directory plugin, business directory

Other plugins by this author: Directorist AddonsKit for Elementor, Legal Pages - Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator, Logo Carousel Slider, Product Carousel Slider & Grid Ultimate for WooCommerce, Logo Showcase Ultimate - Logo Carousel, Logo Slider & Logo Grid, FormGent - Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More, Post Grid, Slider & Carousel Ultimate - with Shortcode, Gutenberg Block & Elementor Widget, Directorist - WPML Integration, HelpGent - Video Funnels and Conversational Forms for WordPress, Best Listing Toolkit, Connections to Directorist Migrator, Videos For WooCommerce

Questions

Is Directorist: AI-Powered Business Directory, Listings & Classified Ads still maintained?

Directorist: AI-Powered Business Directory, Listings & Classified Ads was last updated on 1 Nov 2026. Its Canary status is Healthy.

Is Directorist: AI-Powered Business Directory, Listings & Classified Ads safe?

Directorist: AI-Powered Business Directory, Listings & Classified Ads has no open unpatched vulnerabilities on record. 19 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Directorist: AI-Powered Business Directory, Listings & Classified Ads?

The wordpress.org author is wpWax. Recent committers: rafiq91, obiplabon, armanul94, aazztech, plugin-master. We have recorded no ownership change.

What can I use instead of Directorist: AI-Powered Business Directory, Listings & Classified Ads?

Plugins in the same category with a higher Canary Score: Simple Job Board, HireZoot - Job Listings, Career Page & Recruitment Tool, HivePress Messages, HivePress Reviews, HivePress Favorites.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue