Skip to content
PluginCanary

Directory Listings WordPress plugin

Directory Listings WordPress plugin - uListing
by Stylemix · 1,000+ active installs · Checked 3 Nov 2026
Avoid9 Criticals2 Warnings

Avoid: vulnerability published 9 Oct 2026 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39: a vulnerability has no patch.

Sub-scores for Directory Listings WordPress plugin
Ownership100
Maintenance20
Security0
Support70
Reputation70

How the score works

Quick answers

Is Directory Listings WordPress plugin still maintained?
No. Last release 15 Apr 2025, over 1 year ago. 15 Apr 2025 · wordpress.org
Who owns Directory Listings WordPress plugin, and has it changed hands?
No change recorded. Main committer stylemix since Mar 2019. 3 Nov 2026 · SVN log
Was Directory Listings WordPress plugin removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Directory Listings WordPress plugin safe?
No. 9 known vulnerabilities have no fix in the current version. 9 Oct 2026 · Wordfence Intelligence
Is the latest Directory Listings WordPress plugin update safe to install?
No ownership change before 2.2.0. No one-star spike after it. 15 Apr 2025 · Release history

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 9 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Oct 2026Evidence
  • CriticalSEC-2Vulnerability published 9 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Oct 2026Evidence
  • CriticalSEC-2Vulnerability published 22 Jul 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.5 Aug 2026Evidence
  • CriticalSEC-2Vulnerability published 22 Jul 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.5 Aug 2026Evidence
  • CriticalSEC-2Vulnerability published 26 Feb 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.12 Mar 2026Evidence
  • CriticalSEC-2Vulnerability published 22 Apr 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.6 May 2025Evidence
  • CriticalSEC-2Vulnerability published 15 Apr 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.29 Apr 2025Evidence
  • CriticalSEC-2Vulnerability published 14 Mar 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.28 Mar 2025Evidence
  • CriticalSEC-2Vulnerability published 14 Mar 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.28 Mar 2025Evidence
  • WarningMNT-2Tested up to WordPress 6.7.11, 4 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • WarningMNT-1No release in 18 months (last release 15 Apr 2025). Plan a replacement if the plugin is important to your site.15 Apr 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master6 Feb 2019 to 6 Feb 2019, 1 commits
stylemix25 Mar 2019 to 15 Apr 2025, 128 commits

2 committers recorded. No ownership change since 2019.

Maintenance

Last release
19 months ago
Releases, 24 months
4
Tested up to
6.7 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Directory Listings WordPress plugin
Q1 20240
Q2 20240
Q3 20241
Q4 20240
Q1 20253
Q2 20251
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 15 Apr 2025. Tested up to 6.7, 4 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 3.9.

Rating distribution
5 star18
4 star4
3 star1
2 star1
1 star6

Security record

12 vulnerabilities in 24 months (30 on record), 9 with no fix in the current version.

PublishedIssueCVSSAffectedFixed inDays to patch
9 Oct 2026Directory Listings WordPress plugin – uListing <= 2.2.0 - Unauthenticated SQL Injection7.5<= 2.2.0No fixn/a
9 Oct 2026Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Settings Update4.3<= 2.2.0No fixn/a
22 Jul 2026Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization4.3<= 2.2.0No fixn/a
22 Jul 2026Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization4.3<= 2.2.0No fixn/a
26 Feb 2026Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Editor+) Arbitrary File Download4.9<= 2.2.0No fixn/a
22 Apr 2025uListing <= 2.2.0 - Authenticated (Administrator+) PHP Object Injection6.6<= 2.2.0No fixn/a
15 Apr 2025uListing <= 2.2.0 - Authenticated (Subscriber+) PHP Object Injection8.8<= 2.2.0No fixn/a
14 Mar 2025Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation8.8<= 2.2.0No fixn/a
14 Mar 2025Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection8.8<= 2.2.0No fixn/a
Show 21 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
4 Apr 2025uListing <= 2.1.9 - Authenticated (Administrator+) SQL Injection4.9<= 2.1.9Not affectedn/a
3 Feb 2025uListing <= 2.1.6 - Authenticated (Contributor+) SQL Injection6.5<= 2.1.62.1.73
3 Feb 2025uListing <= 2.1.6 - Unauthenticated SQL Injection7.5<= 2.1.62.1.73
27 Sep 2024uListing <= 2.1.5 - Unauthenticated Information Exposure5.3<= 2.1.52.1.6Patched before disclosure
28 Oct 2021uListing <= 1.6.6 - Unauthenticated SQL Injection9.8< 1.71.7Patched before disclosure
6 Sep 2021Listing, Classified Ads & Business Directory – uListing <= 2.0.8 - Cross-Site Request Forgery8.8<= 2.0.82.0.9Patched before disclosure
27 Jul 2021Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Privilege Escalation9.8<= 2.0.52.0.6Patched before disclosure
27 Jul 2021uListing <= 2.0.5 - Cross-Site Request Forgery leading to Settings Change4.3<= 2.0.52.0.6Patched before disclosure
27 Jul 2021Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Cross-Site Request Forgery6.5<= 2.0.52.0.6Patched before disclosure
27 Jul 2021Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Cross-Site Request Forgery5.4<= 2.0.52.0.6Patched before disclosure
27 Jul 2021Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Reflected Cross-Site Scripting6.1<= 2.0.52.0.6Patched before disclosure
27 Jul 2021uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR)7.1<= 2.0.52.0.6Patched before disclosure
26 Jul 2021Listing, Classified Ads & Business Directory – uListing <= 2.0.3 - Unauthenticated SQL Injection9.8<= 2.0.32.0.4Patched before disclosure
28 Jan 2021uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route9.8< 1.71.7Patched before disclosure
28 Jan 2021uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion6.5< 1.71.7Patched before disclosure
28 Jan 2021uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion9.1< 1.71.7Patched before disclosure
28 Jan 2021uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes9.8< 1.71.7Patched before disclosure
28 Jan 2021uListing <= 1.6.6 - Missing Authorization9.8< 1.71.7Patched before disclosure
28 Jan 2021uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation9.8< 1.71.7Patched before disclosure
28 Jan 2021uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX9.8< 1.71.7Patched before disclosure
28 Jan 2021uListing <= 1.6.6 - Unauthenticated Information Disclosure7.5< 1.71.7Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Directory Listings WordPress plugin
4 May 202640
11 May 202671
18 May 202668
25 May 202663
1 Jun 202684
8 Jun 202684
15 Jun 202664
22 Jun 202667
29 Jun 202672
6 Jul 202693
13 Jul 202684
20 Jul 202695
27 Jul 202699
3 Aug 2026117
10 Aug 2026117
17 Aug 2026107
24 Aug 202696
31 Aug 202699
7 Sep 2026144
14 Sep 202693
21 Sep 2026141
28 Sep 2026159
5 Oct 2026159
12 Oct 2026173
19 Oct 2026226
26 Oct 2026210
2 Nov 202646

Weekly downloads over the last 4 weeks are 54% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Simple Job BoardScore 92 · 10,000+HireZootScore 91 · 30,000+WP Job ManagerScore 90 · 70,000+Business Directory PluginScore 86 · 10,000+GeoDirectoryScore 86 · 10,000+

Facts

Version2.2.0
AuthorStylemix
Added25 Mar 2019
Last updated15 Apr 2025
Active installs1,000+
Requires WordPress4.6
Tested up to6.7.11
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagslistings, classified, real-estate, classified ads

Other plugins by this author: Cost Calculator Builder, MasterStudy LMS WordPress Plugin - for Online Courses and Education, Motors - Car Dealership & Classified Listings Plugin, Pearl - Header Builder, Motors VIN Decoder, MasterStudy LMS Divi Modules, Checkout Custom Fields Builder for WooCommerce

Questions

Is Directory Listings WordPress plugin still maintained?

No. Last release 15 Apr 2025, over 1 year ago.

Who owns Directory Listings WordPress plugin, and has it changed hands?

No change recorded. Main committer stylemix since Mar 2019.

Was Directory Listings WordPress plugin removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Directory Listings WordPress plugin safe?

No. 9 known vulnerabilities have no fix in the current version.

Is the latest Directory Listings WordPress plugin update safe to install?

No ownership change before 2.2.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue