Plugin Pulse Beta
← Pulse

WP Directory Kit

by WPDirectoryKit · Uncategorized

Also makes 5 other plugins · 3.4K+ installs across the portfolio →

Try it live ↗ wp.org ↗

Build your Directory portal, demos for Real Estate Agency and Car Dealership included

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

⚠ Open vulnerability

Health

B 82/100

Open vulnerability

Active installs

2K+

≈2.6K estimated

Momentum

+450%

downloads vs prior 30d

Biggest opportunity: Swap “listing”, “real estate” and “directory plugin” for “dealership”, “estate agency” and “realtor”. “listing” isn't earning its slot: you're not in the first 24 results for its own search. “dealership” sits at #4 untagged, close enough for a declared tag to move it up. “real estate” isn't earning its slot: you're not in the first 24 results for its own search. “estate agency” sits at #6 untagged, close enough for a declared tag to move it up. “directory plugin” isn't earning its slot: it only gets you to #23. “realtor” sits at #7 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.

See the detail → Get the free audit
How scoring works →
82 Health · B
Maintenance 100/100
Rating quality 92/100
Support 70/100
Security 40/100

82 health vs 58 average across 25,737 Uncategorized plugins

2K+

Active installs

≈2.6K estimated

116.9K

Total downloads

since 2021 · 1.7% still active

4.6/5

Rating

4.9 on wp.org · 35 reviews

+450%

4.9K

Downloads · 30d

category median +7%

Install conversion

How it's measured →

1.7%

of downloads still active

At least 2K of 116.9K lifetime downloads are still running, above its category: the median Uncategorized plugin keeps 0.6%, across 17,769 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Uncategorized plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 15 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Ratings · 35 reviews

Read on wp.org ↗
5★
33 4★
1 3★
0 2★
1 1★
0

Details

Version
1.6.1
Last updated
15d ago
Added
2021-01-28 · 5 yrs old
Requires WP
5.3
Tested up to
7.1.4
Requires PHP
7.0
Changelog ↗Support forum ↗Reviews ↗Advanced stats ↗

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

97 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100

Updated 15 days ago

WP compatibility 100/100

Tested up to WordPress 7.1.4, the current branch or newer

Rating quality 89/100

4.9★ over 35 reviews, smoothed to 4.43★

Listing tuning 100/100

5 of 5 tags set · short description in place

Daily downloads

Since 5 Oct 2022 · 1,488 days · wp.org + Plugin Pulse archive

+450% vs prior 30d
6631 Oct 2026

30-day downloads

Rolling 30-day volume · peak 9.2K · peaks are release surges

4.9K31 Oct 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

WP Directory Kit · #4499youDirectorist: AI-Powe · #1300GeoDirectory · #1457HivePress · #1651

Rating trend

Star average over time · dips mark rough releases

4.931 Oct 2026

Health trend

Composite health score, snapshotted daily

8231 Oct 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

2.4K31 Oct 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

15

releases in the last 12 months

15d ago

latest release · v1.6.1 · 16 Oct 2026

37

tagged releases on record

Recent releases

1.6.1 · 16 Oct 20261.5.9 · 4 Oct 20261.5.7 · 10 Sep 20261.5.6 · 12 Aug 20261.5.5 · 31 Jul 20261.5.4 · 29 Jul 20261.5.3 · 5 Jul 20261.5.1 · 20 Apr 20261.5.0 · 10 Mar 20261.4.9 · 8 Jan 20261.4.8 · 5 Dec 20251.4.7 · 28 Nov 20251.4.6 · 22 Nov 20251.4.5 · 21 Nov 2025

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v1.5 62%
v1.3 24%
v1.4 6.8%
v1.2 5.1%
v1.1 2.1%

Estimated active installs

The public count shows “2K+”. Our estimate pins where the real number sits.

tracked estimate
2K–3K ≈2.6K

Crossed into this band 5 months ago; a band this size takes about a year or more to cross, which places it about 59% of the way through.

Install history since 4 Oct 2022

2K31 Oct 2026

Recent reviews

All reviews on wp.org ↗
  1. ★★★★★ gazirizgar
    10mo ago

    It would be perfect if it were improved further

    Read on wp.org ↗
  2. ★★★★★ jorjsarabia24
    1.2y ago

    Great services thanks

    Read on wp.org ↗
  3. ★★★★★ mekletterapeitu
    1.5y ago

    Good plugin, decided to use this one instead similar once i was using before because this looks better and have some better functionality. When i got into some issues support was timely, precise and overall helped me with all issues and bugs.

    Read on wp.org ↗
  4. ★★★★★ assassin1717
    1.7y ago

    Easy to set up, highly customizable, and perfect for creating professional directories.

    Read on wp.org ↗
  5. ★★★★★ gressi33
    2.1y ago

    You are the best! Thanks a lot for your work! This topic was modified 1 year, 9 months ago by gressi33.

    Read on wp.org ↗
  6. ★★★★★ cidcastello
    2.2y ago

    Excelente plugin!

    Read on wp.org ↗
  7. ★★★★★ patricioposada
    2.3y ago

    It is a truly pain in the A>> to achieve export listings with acf… You must work in this…

    Read on wp.org ↗
  8. ★★★★★ nitroficialiqc
    2.6y ago

    Excelente integración por varias plantillas de WordPress

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. — Version 1.6.1 Fixed security 1.6.1
  2. — Version 1.6.0 Fixed security 1.6.0
  3. — Version 1.5.9 Fixed security Improved styles 1.5.9
  4. — Version 1.5.8 Integrated suggestion install plugin Form Populate With AI New! AI-powered search. Bug fixes and small enhancements 1.5.8
  5. — Version 1.5.6 Fixed security 1.5.6
  6. — Version 1.5.5 Improve find gps by Google API Quick navigation added to the Listing Edit page for easier switching between listings Fixed security 1.5.5

Security history

via Wordfence Intelligence

1 open vulnerability affects the current version (1.6.1). 40 of 41 disclosed are patched.

  1. Patched High · 7.5 WP Directory Kit <= 1.6.0 - Unauthenticated SQL Injection via 'idfield' Parameter ↗
    2026-10-30 CVE-2026-109197 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.6.0 Patched in 1.6.1
  2. Patched Medium · 6.5 WP Directory Kit <= 1.5.9 - Authenticated (Subscriber+) SQL Injection via 'display_name' Profile Field (Second-Order) ↗
    2026-10-09 CVE-2026-96653 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.5.9 Patched in 1.6.0
  3. Patched Medium · 6.5 WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'data_fields_list' Parameter ↗
    2026-09-29 CVE-2026-16596 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.5.4 Patched in 1.5.5
  4. Patched Medium · 6.4 Directory Kit <= 1.5.7 - Authenticated (Listing Admin+) Stored Cross-Site Scripting ↗
    2026-09-24 CVE-2026-16591 Improper Neutralization of Input During Web Page Generation Affects <= 1.5.7 Patched in 1.5.8
  5. Patched Medium · 6.5 WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'order_by' Parameter ↗
    2026-09-15 CVE-2026-16588 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.5.4 Patched in 1.5.5
  6. Patched Medium · 4.9 Directory Kit <= 1.5.8 - Authenticated (Editor+) SQL Injection ↗
    2026-09-12 CVE-2026-16593 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.5.8 Patched in 1.5.9
  7. Patched Medium · 4.3 Directory Kit <= 1.6.0 - Authenticated (Contributor+) Information Exposure ↗
    2026-09-12 CVE-2026-16592 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.6.0 Patched in 1.6.1
  8. Open Medium · 5.3 Directory Kit <= 1.6.0 - Unauthenticated Information Exposure ↗
    2026-09-12 CVE-2026-18232 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.6.0 No patch available
  9. Patched Medium · 5.3 WP Directory Kit < 1.5.7 - Unauthenticated Information Exposure ↗
    2026-08-21 CVE-2026-18231 Exposure of Sensitive Information to an Unauthorized Actor Affects < 1.5.7 Patched in 1.5.7
  10. Patched Medium · 4.9 WP Directory Kit < 1.5.7 - Authenticated (Administrator+) SQL Injection ↗
    2026-08-20 CVE-2026-18653 Improper Neutralization of Special Elements used in an SQL Command Affects < 1.5.7 Patched in 1.5.7
  11. Patched High · 7.5 Directory Kit <= 1.5.4 - Unauthenticated SQL Injection ↗
    2026-08-12 CVE-2026-28001 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.5.4 Patched in 1.5.5
  12. Patched Medium · 5.9 WP Directory Kit <= 1.5.4 - Unauthenticated SQL Injection ↗
    2026-08-11 CVE-2026-27538 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.5.4 Patched in 1.5.5
  13. Patched High · 7.5 Directory Kit <= 1.5.5 - Unauthenticated SQL Injection ↗
    2026-08-10 CVE-2026-18474 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.5.5 Patched in 1.5.6
  14. Patched Medium · 6.5 Directory Kit <= 1.5.5 - Authenticated (Subscriber+) SQL Injection ↗
    2026-08-10 CVE-2026-18230 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.5.5 Patched in 1.5.6
  15. Patched Medium · 4.3 Directory Kit <= 1.5.4 - Authenticated (Subscriber+) Plugin Settings and API Key Disclosure ↗
    2026-08-03 CVE-2026-16594 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.5.4 Patched in 1.5.5
  16. Patched Medium · 4.3 Directory Kit <= 1.5.4 - Information Exposure to Authenticated (Subscriber+) User and Unpublished Listing Disclosure ↗
    2026-08-03 CVE-2026-16595 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.5.4 Patched in 1.5.5
  17. Patched Medium · 6.5 Directory Kit <= 1.5.4 - Authenticated (Subscriber+) SQL Injection ↗
    2026-08-03 CVE-2026-16589 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.5.4 Patched in 1.5.5
  18. Patched Medium · 4.3 Directory Kit <= 1.5.4 - Authenticated (Subscriber+) Contact Message and User Data Disclosure ↗
    2026-08-03 CVE-2026-16590 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.5.4 Patched in 1.5.5
  19. Patched High · 7.5 Directory Kit <= 1.5.4 - Unauthenticated SQL Injection ↗
    2026-08-03 CVE-2026-18473 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.5.4 Patched in 1.5.5
  20. Patched High · 7.5 WP Directory Kit <= 1.5.1 - Unauthenticated SQL Injection ↗
    2026-05-14 CVE-2026-42672 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.5.1 Patched in 1.5.2
  21. Patched High · 7.5 WP Directory Kit <= 1.5.0 - Unauthenticated SQL Injection ↗
    2026-04-13 CVE-2026-39531 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.5.0 Patched in 1.5.1
  22. Patched Medium · 5.3 WP Directory Kit <= 1.5.0 - Missing Authorization ↗
    2026-04-08 CVE-2026-39534 Missing Authorization Affects <= 1.5.0 Patched in 1.5.1
  23. Patched Medium · 5.3 WP Directory Kit <= 1.4.9 - Unauthenticated Email Exposure via wdk_public_action ↗
    2026-01-23 CVE-2025-13920 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.4.9 Patched in 1.5.0
  24. Patched High · 7.5 WP Directory Kit <= 1.4.7 - Unauthenticated SQL Injection ↗
    2025-12-12 CVE-2025-13089 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.4.7 Patched in 1.4.8
  25. Patched Critical · 10.0 WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover ↗
    2025-12-03 CVE-2025-13390 Incorrect Implementation of Authentication Algorithm Affects 1.4.0 - 1.4.4 Patched in 1.4.5
  26. Patched Medium · 4.9 WP Directory Kit <= 1.4.6 - Authenticated (Admin+) SQL Injection ↗
    2025-12-01 CVE-2025-13090 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.4.6 Patched in 1.4.7
  27. Patched Medium · 6.1 WP Directory Kit <= 1.4.5 - Reflected Cross-Site Scripting via 'order_by' Parameter ↗
    2025-11-26 CVE-2025-13525 Improper Neutralization of Input During Web Page Generation Affects <= 1.4.5 Patched in 1.4.6
  28. Patched High · 7.5 WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function ↗
    2025-11-20 CVE-2025-13138 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.4.3 Patched in 1.4.4
  29. Patched Medium · 5.3 WP Directory Kit <= 1.4.0 - Missing Authorization ↗
    2025-09-26 CVE-2025-60120 Missing Authorization Affects <= 1.4.0 Patched in 1.4.1
  30. Patched Medium · 6.1 WP Directory Kit <= 1.3.5 - Reflected Cross-Site Scripting ↗
    2024-07-04 CVE-2024-37487 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.5 Patched in 1.3.6
  31. Patched Low · 2.7 WP Directory Kit <= 1.3.6 - Authenticated (Admin+) HTML Injection ↗
    2024-06-26 CVE-2024-37253 Improper Neutralization of Special Elements in Output Used by a Downstream Component Affects <= 1.3.6 Patched in 1.3.7
  32. Patched High · 8.8 WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection ↗
    2024-04-04 CVE-2024-3217 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.3.0 Patched in 1.3.1
  33. Patched Medium · 6.1 WP Directory Kit <= 1.2.9 - Reflected Cross-Site Scripting ↗
    2024-03-25 CVE-2024-29774 Improper Neutralization of Input During Web Page Generation Affects <= 1.2.9 Patched in 1.3.0
  34. Patched Medium · 5.3 WP Directory Kit <= 1.2.6 - Missing Authorization ↗
    2023-09-05 CVE-2023-41875 Missing Authorization Affects <= 1.2.6 Patched in 1.2.7
  35. Patched Medium · 6.5 WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action ↗
    2023-06-12 CVE-2023-2351 Missing Authorization Affects <= 1.2.3 Patched in 1.2.4
  36. Patched Medium · 6.1 WP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search' ↗
    2023-06-01 CVE-2023-2835 Improper Neutralization of Input During Web Page Generation Affects <= 1.2.3 Patched in 1.2.4
  37. Patched Critical · 9.8 WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action ↗
    2023-05-26 CVE-2023-2278 Improper Limitation of a Pathname to a Restricted Directory Affects <= 1.1.9 Patched in 1.2.0
  38. Patched Medium · 6.5 WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_action ↗
    2023-05-02 CVE-2023-2280 Missing Authorization Affects <= 1.2.2 Patched in 1.2.3
  39. Patched Medium · 6.1 WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem ↗
    2023-04-28 CVE-2023-2277 Cross-Site Request Forgery Affects <= 1.1.9 Patched in 1.2.0
  40. Patched Medium · 5.4 WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_display ↗
    2023-04-28 CVE-2023-2279 Cross-Site Request Forgery Affects <= 1.2.1 Patched in 1.2.2
  41. Patched Medium · 5.4 WP Directory Kit <= 1.1.9 - Open Redirect ↗
    2023-04-27 CVE-2023-31229 URL Redirection to Untrusted Site Affects <= 1.1.9 Patched in 1.2.0

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

✓ Low memory footprint
✓ Low page-speed impact
✕ Runs on latest PHP + WP
✓ No PHP errors
✓ No JS errors
✓ Activates cleanly
✕ No resource errors
✓ No external HTTP errors
✓ Optimized database use
✓ Frequently updated

Languages

via translate.wordpress.org

Translated into 20 languages, 6 at 90% or more

Czech 100%
Swedish 100%
Ukrainian 100%
Russian 99%
Turkish 99%
Spanish (Spain) 98%
Croatian 74%
German (Formal) 27%
Hebrew 26%
Dutch 13%
German 11%
English (UK) 4%
French (France) 4%
Portuguese (Brazil) 4%
Romanian 4%
English (Australia) 3%
English (Canada) 3%
Esperanto 3%
Italian 3%
Serbian 3%

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Readme readiness

7 of 8 pass · checked 28 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ✓ Says what it does "Build your Directory portal, demos for Real Estate Agency and Car Dealership included"
  • ✓ Has a FAQ 9 questions in the FAQ.
  • ✓ FAQ asks real questions 9 of 9 read like questions a user would type.
  • ! Names who it is for One audience phrase ("for real estate"); say who the plugin is for and what they use it for.
  • ✓ Names what it works with Mentions Elementor, Mailchimp, Facebook.
  • ✓ Headings and lists 4 headings and 3 lists.
  • ✓ Enough to quote 6,716 characters of description.
  • ✓ Tags match the text 4 of 5 tags appear in the text; "directory plugin" does not.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2026-06-05 3K+ → 2K+ down after 318 days in tier
  2. 2025-07-22 4K+ → 3K+ down after 342 days in tier
  3. 2024-08-14 3K+ → 4K+ up after 3 days in tier
  4. 2024-08-11 4K+ → 3K+ down after 1 days in tier
  5. 2024-08-10 3K+ → 4K+ up after 286 days in tier
  6. 2023-10-29 2K+ → 3K+ up after 212 days in tier
  7. 2023-03-31 1K+ → 2K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for WP Directory Kit into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/wpdirectorykit" width="480" height="300" style="border:0" loading="lazy" title="WP Directory Kit — Plugin Pulse"></iframe>
Preview card ↗

WP Directory Kit: 2K+ active installs, 4.9★ (35 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/wpdirectorykit

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.