DirectoryPress – Business Directory And Classified Ad Listing

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 88% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

One reviewer liked it enough to put it on a live site, while another says the docs are thin and the custom fields are too limited, with no date type or validation.

1. ★★★★★ samlovedesign

   1.3y ago

   tried the plugin for testing purposes and started using on a live site now.

   Read on wp.org ↗
2. ★★★★★ Piggykce

   1.6y ago

   Poor documentation, really basic options, you can have Link field type but you cannot have Date field type. You cannot have validation on field types. Really bad product

   Read on wp.org ↗

11 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.5 DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages' ↗
   2026-04-15 CVE-2026-3489 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.6.26 Patched in 3.6.27
2. Medium · 5.3 DirectoryPress <= 3.6.26 - Unauthenticated Information Exposure ↗
   2026-03-23 CVE-2026-39566 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.6.26 Patched in 3.6.27
3. Medium · 4.3 DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Missing Authorization ↗
   2025-12-18 CVE-2026-27387 Missing Authorization Affects <= 3.6.26 Patched in 3.6.27
4. Medium · 5.3 DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.25 - Missing Authorization ↗
   2025-12-18 CVE-2026-23548 Missing Authorization Affects <= 3.6.25 Patched in 3.6.26
5. Medium · 6.4 DirectoryPress <= 3.6.25 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-10-18 CVE-2025-62967 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.6.25 Patched in 3.6.26
6. Medium · 4.3 DirectoryPress <= 3.6.22 - Cross-Site Request Forgery ↗
   2025-04-04 CVE-2025-32249 Cross-Site Request Forgery (CSRF) Affects <= 3.6.22 Patched in 3.6.23
7. Medium · 4.3 DirectoryPress <= 3.6.19 - Cross-Site Request Forgery to Cross-Site Scripting ↗
   2025-01-06 CVE-2024-49633 Cross-Site Request Forgery (CSRF) Affects <= 3.6.19 Patched in 3.6.20
8. Medium · 5.4 DirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2024-12-23 CVE-2024-10584 Unrestricted Upload of File with Dangerous Type Affects <= 3.6.16 Patched in 3.6.17
9. Critical · 9.9 DirectoryPress <= 3.6.10 - Authenticated (Contributor+) SQL Injection ↗
   2024-07-11 CVE-2024-38755 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.6.10 Patched in 3.6.11
10. High · 7.2 DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.7 - Reflected Cross-Site Scripting ↗
    2024-04-16 CVE-2024-32567 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.6.7 Patched in 3.6.8
11. High · 7.3 DirectoryPress <= 3.6.2 - Missing Authorization ↗
    2023-07-12 CVE-2023-37967 Missing Authorization Affects <= 3.6.2 Patched in 3.6.3

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 3 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-06 800+ → 700+ down after 1 days in tier
2. 2026-08-05 700+ → 800+ up after 3 days in tier
3. 2026-08-02 800+ → 700+ down after 1 days in tier
4. 2026-08-01 700+ → 800+ up after 2 days in tier
5. 2026-07-30 800+ → 700+ down after 64 days in tier
6. 2026-05-27 900+ → 800+ down after 2 days in tier
7. 2026-05-25 800+ → 900+ up after 1 days in tier
8. 2026-05-24 900+ → 800+ down after 72 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• D DirectoryPress Frontend 700+ installs · 3.6★ · 5 shared tags C
• aDirectory – WP Business Directory Plugin and Classified Ads Listings Directory 300+ installs · 4.4★ · 2 shared tags A
• Property – Real Estate Directory Listing 50+ installs · 3.6★ · 2 shared tags C
• Directorist: AI-Powered Business Directory, Listings & Classified Ads 20K+ installs · 4.6★ · 1 shared tag A
• GeoDirectory – WP Business Directory Plugin and Classified Listings Directory 10K+ installs · 4.7★ · 1 shared tag A
• HivePress – Business Directory, Listings & Classified Ads Plugin 10K+ installs · 4.8★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for DirectoryPress – Business Directory And Classified Ad Listing into a readme, a review or a deck. It updates itself.

DirectoryPress – Business Directory And Classified Ad Listing: 700+ active installs, 3.0★ (2 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/directorypress