Skip to content
PluginCanary

DirectoryPress - Business Directory And Classified Ad Listing

by Designinvento · 600+ active installs · Checked 3 Nov 2026
Avoid1 Critical1 Warning

Avoid: vulnerability published 9 Oct 2026 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for DirectoryPress - Business Directory And Classified Ad Listing
Ownership100
Maintenance50
Security0
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 9 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Oct 2026Evidence
  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • InfoSEC-39 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
8 months ago
Releases, 24 months
1
Tested up to
6.9 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for DirectoryPress - Business Directory And Classified Ad Listing
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20261
Q2 20260
Q3 20260
Q4 20260

Last release 4 Mar 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
9 Oct 2026DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.27 - Unauthenticated Local File Inclusion8.1<= 3.6.27No fixn/a
15 Apr 2026DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages'7.5<= 3.6.263.6.270
23 Mar 2026DirectoryPress <= 3.6.26 - Unauthenticated Information Exposure5.3<= 3.6.263.6.270
18 Dec 2025DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Missing Authorization4.3<= 3.6.263.6.2777
18 Dec 2025DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.25 - Missing Authorization5.3<= 3.6.253.6.26n/a
18 Oct 2025DirectoryPress <= 3.6.25 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.6.253.6.26n/a
4 Apr 2025DirectoryPress <= 3.6.22 - Cross-Site Request Forgery4.3<= 3.6.223.6.23n/a
6 Jan 2025DirectoryPress <= 3.6.19 - Cross-Site Request Forgery to Cross-Site Scripting4.3<= 3.6.193.6.20n/a
23 Dec 2024DirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site Scripting5.4<= 3.6.163.6.17n/a
11 Jul 2024DirectoryPress <= 3.6.10 - Authenticated (Contributor+) SQL Injection9.9<= 3.6.103.6.11n/a
16 Apr 2024DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.7 - Reflected Cross-Site Scripting7.2<= 3.6.73.6.8n/a
12 Jul 2023DirectoryPress <= 3.6.2 - Missing Authorization7.3<= 3.6.23.6.3n/a

Source: Wordfence Intelligence.

Reputation

Lifetime rating 3.0 from 2 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star1
4 star0
3 star0
2 star0
1 star1

Momentum

600+ active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version3.6.27
AuthorDesigninvento
Added13 Aug 2009
Last updated4 Mar 2026
Active installs600+
Requires WordPress6.0
Tested up to6.9.11
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagscar dealer, classified, directories, directory listing, business directory

Other plugins by this author: DirectoryPress Frontend, Terms Order WP - Categories And Taxonomies Order Plugin, Dicode Icons Pack

Questions

Is DirectoryPress - Business Directory And Classified Ad Listing still maintained?

DirectoryPress - Business Directory And Classified Ad Listing was last updated on 4 Mar 2026. Its Canary status is Avoid.

Is DirectoryPress - Business Directory And Classified Ad Listing safe?

DirectoryPress - Business Directory And Classified Ad Listing has 1 published vulnerability with no patched version. Its Canary status is Avoid.

Who owns DirectoryPress - Business Directory And Classified Ad Listing?

The wordpress.org author is Designinvento. We have recorded no ownership change.

What can I use instead of DirectoryPress - Business Directory And Classified Ad Listing?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue