GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 89% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ Anonymous

   5mo ago

   These people make a powerful directory product and are pretty darned helpful.

   Read on wp.org ↗
2. ★★★★★ kylecoleman

   5mo ago

   Thanks to the Geodirectory team they have helped me fix a issue that took me almost a week to try and fix. Turn around time support is exceptional, thanks again for the great support.

   Read on wp.org ↗
3. ★★★★★ johnhuk55

   5mo ago

   Started to use GeoDirectory for my local town Sandwich, Kent and have been so grateful to the support team for helping me learn how to make best use of the tools. So far, very impressed .. quick answers, friendly and professional. Highly recommend as a Directory and Events plugin solution for WordPress

   Read on wp.org ↗
4. ★★★★★ dpwsl

   7mo ago

   Great plugin and support, would recommend to those needing a flexible directory website.

   Read on wp.org ↗
5. ★★★★★ stephenwp001

   7mo ago

   The GEO Directory plugin is awesome and by far the best WP directory plugin I’ve used. The developers have done an amazing job, I’m so glad I switched plugins. The functionality is brilliant and the option settings are extremely thorough indeed. Basically they’ve covered everything in great detail. The company also provides two additional plugins to make your directory a fully functional website with payment facilities and user profiles. I also have to mention their support staff, WOW, they are so helpful, knowledgeable, and quick to respond. Thank you so much.

   Read on wp.org ↗
6. ★★★★★ redrabbit63

   7mo ago

   We use GeoDirectory for a business directory so its crucial the site is functioning correctly. Support has always been very responsive to any questions we have.

   Read on wp.org ↗
7. ★★★★★ bychancegraphicsllc

   7mo ago

   GUUST is AMAZING! Patient, extremely knowledgeable, and supportive. Guust deserves a raise! This plug-in does exactly what I wanted it to do. The support I received was very helpful, and very fast. I’m so glad I chose GeoDirectory! Thanks Guust!

   Read on wp.org ↗
8. ★★★★★ fcitdavid

   7mo ago

   In styling this plugin for my use case I have had a couple of questions that have stumped me. When I’ve reached out for support the response has been quick, accurate and helpful. I’m very happy with the results.

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-24 Version 8.178 Map style conflict with Astra theme – FIXED Extra sanitization added for Popover HTML content – FIXED/SECURITY 8.178
2. 2026-08-22 Version 8.177 Markers REST API should not validate logged in users failed nonce check – FIXED/SECURITY 8.177
3. 2026-08-20 Version 8.175 Validate review author email in single review check SQL – FIXED/SECURITY 8.175
4. 2026-08-18 Version 8.174 Added extra validation in REST auth requests – FIXED/SECURITY 8.174
5. 2026-08-18 Version 8.173 Load GD > Map default block version for iframe compatibility – COMPATIBILITY 8.173
6. 2026-08-14 Version 8.172 Enhance validation message when edited post type does not match the default post type – CHANGED Enhance validation and output encoding for AJAX search parameters – FIXED/SECURITY Added include, parent, term_order sorting 8.172

26 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.173 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-08-19 CVE-2026-66604 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.173 Patched in 2.8.174
2. Medium · 6.4 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.177 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-08-18 CVE-2026-68565 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.177 Patched in 2.8.178
3. High · 8.1 GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision ↗
   2026-08-11 CVE-2026-19091 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 2.8.169 Patched in 2.8.170
4. Medium · 5.3 GeoDirectory <= 2.8.168 - Unauthenticated Pending/Draft Listing Disclosure ↗
   2026-08-03 CVE-2026-16988 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.8.168 Patched in 2.8.169
5. Medium · 4.4 GeoDirectory <= 2.8.109 - Authenticated (Editor+) Stored Cross-Site Scripting ↗
   2026-07-28 CVE-2025-15677 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.109 Patched in 2.8.110
6. Medium · 4.3 GeoDirectory <= 2.8.167 - Information Exposure to Authenticated (Contributor+) User Email Disclosure ↗
   2026-07-27 CVE-2026-16968 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.8.167 Patched in 2.8.168
7. Medium · 6.4 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.161 - Authenticated (Subscriber+) Server-Side Request Forgery ↗
   2026-06-30 CVE-2026-57681 Server-Side Request Forgery (SSRF) Affects <= 2.8.161 Patched in 2.8.162
8. High · 7.5 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.162 - Unauthenticated SQL Injection ↗
   2026-06-17 CVE-2026-54831 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.8.162 Patched in 2.8.163
9. Medium · 5.3 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.157 - Missing Authorization ↗
   2026-05-13 CVE-2026-42671 Missing Authorization Affects <= 2.8.157 Patched in 2.8.158
10. High · 7.5 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.152 - Unauthenticated SQL Injection ↗
    2026-04-13 CVE-2026-39512 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.8.152 Patched in 2.8.154
11. Medium · 4.3 GeoDirectory <= 2.8.149 - Cross-Site Request Forgery ↗
    2026-01-23 CVE-2026-24549 Cross-Site Request Forgery (CSRF) Affects <= 2.8.149 Patched in 2.8.150
12. Medium · 4.3 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment ↗
    2025-11-11 CVE-2025-12833 Authorization Bypass Through User-Controlled Key Affects <= 2.8.139 Patched in 2.8.140
13. Medium · 6.4 GeoDirectory <= 2.8.119 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-06-20 CVE-2025-6200 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.119 Patched in 2.8.120
14. Medium · 6.4 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter ↗
    2025-02-10 CVE-2024-13506 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.97 Patched in 2.8.98
15. High · 7.5 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Unauthenticated SQL Injection ↗
    2025-01-29 CVE-2024-13507 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.8.97 Patched in 2.8.98
16. Medium · 6.4 GeoDirectory <= 2.3.84 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-12-30 CVE-2024-56259 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.3.84 Patched in 2.3.85
17. Medium · 6.4 GeoDirectory <= 2.3.80 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-10-24 CVE-2024-50437 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.3.80 Patched in 2.3.81
18. Medium · 4.3 GeoDirectory <= 2.3.70 - Missing Authorization via geodirectory_rated() ↗
    2024-08-28 CVE-2024-43981 Missing Authorization Affects <= 2.3.70 Patched in 2.3.71
19. Critical · 9.9 GeoDirectory <= 2.3.61 - Authenticated (Subscriber+) SQL Injection ↗
    2024-08-07 CVE-2024-43145 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.3.61 Patched in 2.3.62
20. Medium · 6.4 GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode ↗
    2024-04-22 CVE-2024-3732 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.3.48 Patched in 2.3.49
21. Medium · 6.6 GeoDirectory <= 2.3.28 - Authenticated(Administrator+) SQL Injection ↗
    2023-12-21 CVE-2023-50845 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 2.3.29 Patched in 2.3.29
22. High · 7.2 GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby ↗
    2023-10-18 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.3.28 Patched in 2.3.29
23. High · 7.2 GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection ↗
    2023-01-31 CVE-2023-0278 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.2.23 Patched in 2.2.24
24. Medium · 6.4 GeoDirectory <= 2.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2022-12-29 CVE-2022-4775 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.21 Patched in 2.2.22
25. Medium · 4.1 GeoDirectory <= 2.2.19 - CSV Injection ↗
    2022-12-20 Improper Neutralization of Formula Elements in a CSV File Affects <= 2.2.19 Patched in 2.2.20
26. Medium · 6.4 GeoDirectory <= 2.1.1.2 - Authenticated (admin+) Stored Cross-Site Scripting ↗
    2021-09-02 CVE-2021-24720 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.1.2 Patched in 2.1.1.3

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 131 languages, 3 at 90% or more

Plus 107 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Directorist: AI-Powered Business Directory, Listings & Classified Ads 20K+ installs · 4.6★ · 5 shared tags A
• HivePress – Business Directory, Listings & Classified Ads Plugin 10K+ installs · 4.8★ · 5 shared tags A
• Classified Listing – AI-Powered Classified ads & Business Directory 9K+ installs · 4.8★ · 5 shared tags A
• Advanced Classifieds & Directory Pro 2K+ installs · 4.6★ · 4 shared tags A
• Listdom: AI-powered Business Directory with Classifieds Ads Listings 1K+ installs · 4.7★ · 4 shared tags A
• WP-BusinessDirectory – Business directory plugin for WordPress 30+ installs · 4.2★ · 4 shared tags A

Embed this report card

Drop a live Pulse card for GeoDirectory – WP Business Directory Plugin and Classified Listings Directory into a readme, a review or a deck. It updates itself.

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory: 10K+ active installs, 4.8★ (715 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/geodirectory