DT Directory Lite Addon Security & Risk Analysis

wordpress.org/plugins/dt-directory-lite-addon

The DesignThemes Directory lite addon is a plugin that lets you easily manage and listings on your website.

10 active installs v1.1 PHP 7.1+ WP 4.5+ Updated Sep 17, 2022
directorylisitingmediapropertyvideo
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is DT Directory Lite Addon Safe to Use in 2026?

Generally Safe

Score 85/100

DT Directory Lite Addon has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The "dt-directory-lite-addon" v1.1 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices by exclusively using prepared statements for SQL queries and a high percentage of properly escaped output. The absence of known CVEs and common vulnerability types in its history is also a strong indicator of past security diligence. However, significant concerns arise from the static analysis, particularly regarding the attack surface. A large number of AJAX handlers (30 out of 32) lack authentication checks, presenting a substantial risk for unauthorized execution of functions. Additionally, 7 out of 8 analyzed taint flows involve unsanitized paths, indicating a potential for path traversal or arbitrary file access vulnerabilities, even though no critical or high severity issues were identified in this specific analysis. The presence of nonce checks (7) and capability checks (4) shows some awareness of security controls, but their limited implementation across the identified entry points is insufficient to mitigate the risks posed by unprotected AJAX handlers and unsanitized path flows.

Key Concerns

  • Unprotected AJAX handlers
  • Unsanitized paths in taint flows
  • Limited nonce checks
  • Limited capability checks
Vulnerabilities
None known

DT Directory Lite Addon Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

DT Directory Lite Addon Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
222
980 escaped
Nonce Checks
7
Capability Checks
4
File Operations
1
External Requests
0
Bundled Libraries
1

Bundled Libraries

jQuery

Output Escaping

82% escaped1202 total outputs
Data Flows
7 unsanitized

Data Flow Analysis

8 flows7 with unsanitized paths
dtdr_search_sellerwise_listings (modules\search\utils.php:32)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
30 unprotected

DT Directory Lite Addon Attack Surface

Entry Points67
Unprotected30

AJAX Handlers 32

authwp_ajax_dtdr_search_sellerwise_listingsmodules\search\utils.php:142
noprivwp_ajax_dtdr_search_sellerwise_listingsmodules\search\utils.php:143
authwp_ajax_dtdr_search_sellersmodules\search\utils.php:329
noprivwp_ajax_dtdr_search_sellersmodules\search\utils.php:330
authwp_ajax_dtdr_search_seller_inchargesmodules\search\utils.php:413
noprivwp_ajax_dtdr_search_seller_inchargesmodules\search\utils.php:414
authwp_ajax_dtdr_search_seller_listingsmodules\search\utils.php:497
noprivwp_ajax_dtdr_search_seller_listingsmodules\search\utils.php:498
authwp_ajax_dtdr_search_packagesmodules\search\utils.php:612
noprivwp_ajax_dtdr_search_packagesmodules\search\utils.php:613
authwp_ajax_dtdr_search_packages_purchases_user_detailsmodules\search\utils.php:675
noprivwp_ajax_dtdr_search_packages_purchases_user_detailsmodules\search\utils.php:676
authwp_ajax_dtdr_save_options_settingssettings\settings-utils.php:4
noprivwp_ajax_dtdr_save_options_settingssettings\settings-utils.php:5
authwp_ajax_dtdr_save_skin_settingssettings\settings-utils.php:26
noprivwp_ajax_dtdr_save_skin_settingssettings\settings-utils.php:27
authwp_ajax_dtdr_process_imported_filesettings\settings-utils.php:38
noprivwp_ajax_dtdr_process_imported_filesettings\settings-utils.php:39
authwp_ajax_dtdr_generate_load_search_data_oupututils\utils-listings.php:5
noprivwp_ajax_dtdr_generate_load_search_data_oupututils\utils-listings.php:6
authwp_ajax_dtdr_listing_favourite_markerutils\utils-listings.php:1702
noprivwp_ajax_dtdr_listing_favourite_markerutils\utils-listings.php:1703
authwp_ajax_dtdr_process_listing_contactformutils\utils-listings.php:1797
noprivwp_ajax_dtdr_process_listing_contactformutils\utils-listings.php:1798
authwp_ajax_dtdr_listing_contactdetails_requestutils\utils-listings.php:2066
noprivwp_ajax_dtdr_listing_contactdetails_requestutils\utils-listings.php:2067
authwp_ajax_dtdr_listing_activity_tracker_contactdetailsutils\utils-listings.php:2167
noprivwp_ajax_dtdr_listing_activity_tracker_contactdetailsutils\utils-listings.php:2168
authwp_ajax_dtdr_show_login_form_popuputils\utils-login-form.php:42
noprivwp_ajax_dtdr_show_login_form_popuputils\utils-login-form.php:43
authwp_ajax_dtdr_generate_mls_numberutils\utils.php:318
noprivwp_ajax_dtdr_generate_mls_numberutils\utils.php:319

Shortcodes 35

[dtdr_sp_opening_hours] modules\business-hours\shortcodes.php:116
[dtdr_sp_opening_hours_status] modules\business-hours\shortcodes.php:185
[dtdr_sf_open_now_field] modules\business-hours\shortcodes.php:218
[dtdr_sp_featured_comments] modules\comments\shortcodes.php:35
[dtdr_sp_average_rating] modules\comments\shortcodes.php:113
[dtdr_sp_media_attachments] modules\media-attachments\shortcodes.php:86
[dtdr_sp_media_images] modules\media-images\shortcodes.php:178
[dtdr_sp_price] modules\pricing\shortcodes.php:62
[dtdr_sp_add_to_cart] modules\pricing\shortcodes.php:141
[dtdr_sf_price_range_field] modules\pricing\shortcodes.php:233
[dtdr_sf_keyword_field] modules\search\shortcodes.php:27
[dtdr_sf_categories_field] modules\search\shortcodes.php:28
[dtdr_sf_tags_field] modules\search\shortcodes.php:29
[dtdr_sf_ctype_field] modules\search\shortcodes.php:30
[dtdr_sf_features_field] modules\search\shortcodes.php:31
[dtdr_sf_orderby_field] modules\search\shortcodes.php:32
[dtdr_sf_mls_number_field] modules\search\shortcodes.php:33
[dtdr_sf_submit_button] modules\search\shortcodes.php:35
[dtdr_sf_output_data_container] modules\search\shortcodes.php:37
[dtdr_sp_social_share] modules\social-share\shortcodes.php:94
[dtdr_login_logout_links] shortcodes\shortcodes-default.php:27
[dtdr_listings_listing] shortcodes\shortcodes-default.php:28
[dtdr_listings_taxonomy] shortcodes\shortcodes-default.php:29
[dtdr_sp_featured_image] shortcodes\shortcodes-singlepage.php:28
[dtdr_sp_featured_item] shortcodes\shortcodes-singlepage.php:29
[dtdr_sp_features] shortcodes\shortcodes-singlepage.php:30
[dtdr_sp_contact_details] shortcodes\shortcodes-singlepage.php:31
[dtdr_sp_contact_details_request_btn] shortcodes\shortcodes-singlepage.php:32
[dtdr_sp_social_links] shortcodes\shortcodes-singlepage.php:33
[dtdr_sp_comments] shortcodes\shortcodes-singlepage.php:34
[dtdr_sp_utils] shortcodes\shortcodes-singlepage.php:35
[dtdr_sp_taxonomy] shortcodes\shortcodes-singlepage.php:36
[dtdr_sp_contact_form] shortcodes\shortcodes-singlepage.php:37
[dtdr_sp_post_date] shortcodes\shortcodes-singlepage.php:38
[dtdr_sp_mls_number] shortcodes\shortcodes-singlepage.php:39
WordPress Hooks 158
actioninitcustom-post-types\listings-post-type.php:28
actionadmin_noticescustom-post-types\listings-post-type.php:29
actionadmin_footer-post.phpcustom-post-types\listings-post-type.php:30
actionadmin_footer-edit.phpcustom-post-types\listings-post-type.php:31
filterdisplay_post_statescustom-post-types\listings-post-type.php:32
actionadmin_initcustom-post-types\listings-post-type.php:34
filtertemplate_includecustom-post-types\listings-post-type.php:35
actionsave_postcustom-post-types\listings-post-type.php:42
actionadd_meta_boxescustom-post-types\listings-post-type.php:553
filtermanage_dtdr_listings_posts_columnscustom-post-types\listings-post-type.php:554
actionmanage_dtdr_listings_posts_custom_columncustom-post-types\listings-post-type.php:555
filterdtdr_taxonomiescustom-post-types\taxonomy-custom-fields.php:28
filterwoocommerce_data_storescustom-post-types\woocommerce.php:34
actionwoocommerce_screen_idscustom-post-types\woocommerce.php:39
actionwoocommerce_product_objectcustom-post-types\woocommerce.php:42
actionwoocommerce_add_cart_item_datacustom-post-types\woocommerce.php:45
actionwoocommerce_add_order_item_metacustom-post-types\woocommerce.php:46
actionsave_postcustom-post-types\woocommerce.php:50
actionpre_post_updatecustom-post-types\woocommerce.php:51
actioninitdt-directory-lite-addon.php:86
actionplugins_loadeddt-directory-lite-addon.php:87
filtertheme_page_templatesdt-directory-lite-addon.php:88
filtertemplate_includedt-directory-lite-addon.php:89
actionadmin_menudt-directory-lite-addon.php:91
actionadmin_menudt-directory-lite-addon.php:92
actionparent_filedt-directory-lite-addon.php:93
actionadmin_noticesdt-directory-lite-addon.php:138
filterdtdr_add_listing_fields_from_modulesmodules\business-hours\dashboard.php:31
actionvc_before_initmodules\business-hours\page-builders\visual-composer\sf-open-now.php:2
actionvc_before_initmodules\business-hours\page-builders\visual-composer\sp-opening-hours-status.php:2
actionvc_before_initmodules\business-hours\page-builders\visual-composer\sp-opening-hours.php:2
filterdtdr_metabox_tabsmodules\business-hours\register-module.php:34
actionadmin_enqueue_scriptsmodules\business-hours\register-module.php:36
actionwp_enqueue_scriptsmodules\business-hours\register-module.php:37
actiondtdr_addorupdate_listing_modulemodules\business-hours\register-module.php:39
filterdashboard_modulesmodules\comments\dashboard.php:18
filterdashboard_seller_modulesmodules\comments\dashboard.php:30
actionvc_before_initmodules\comments\page-builders\visual-composer\sp-average-rating.php:2
actionvc_before_initmodules\comments\page-builders\visual-composer\sp-featured-comments.php:2
actioninitmodules\comments\post-type.php:28
actionadmin_initmodules\comments\post-type.php:29
actionsave_postmodules\comments\post-type.php:35
actionsave_postmodules\comments\post-type.php:151
actionadd_meta_boxesmodules\comments\post-type.php:157
actiondtdr_addorupdate_listing_modulemodules\comments\post-type.php:158
actionadmin_enqueue_scriptsmodules\comments\register-module.php:34
actionwp_enqueue_scriptsmodules\comments\register-module.php:35
filtercomments_templatemodules\comments\utils.php:13
filtercomment_form_default_fieldsmodules\comments\utils.php:165
actioncomment_form_logged_in_aftermodules\comments\utils.php:205
filtercomment_form_fieldsmodules\comments\utils.php:263
filtercomment_form_submit_fieldmodules\comments\utils.php:281
actioncomment_postmodules\comments\utils.php:379
actionadd_meta_boxes_commentmodules\comments\utils.php:394
actionedit_commentmodules\comments\utils.php:490
actiontransition_comment_statusmodules\comments\utils.php:561
actiondelete_commentmodules\comments\utils.php:579
actiontrash_commentmodules\comments\utils.php:580
filterdtdr_add_listing_fields_from_modulesmodules\media-attachments\dashboard.php:31
actionvc_before_initmodules\media-attachments\page-builders\visual-composer\sp-media-attachments.php:2
filterdtdr_metabox_tabsmodules\media-attachments\register-module.php:34
actionadmin_enqueue_scriptsmodules\media-attachments\register-module.php:36
actionwp_enqueue_scriptsmodules\media-attachments\register-module.php:37
actiondtdr_addorupdate_listing_modulemodules\media-attachments\register-module.php:39
filterdtdr_add_listing_fields_from_modulesmodules\media-images\dashboard.php:30
actionvc_before_initmodules\media-images\page-builders\visual-composer\sp-media-images.php:2
filterdtdr_metabox_tabsmodules\media-images\register-module.php:34
actionadmin_enqueue_scriptsmodules\media-images\register-module.php:36
actionwp_enqueue_scriptsmodules\media-images\register-module.php:37
actiondtdr_addorupdate_listing_modulemodules\media-images\register-module.php:39
filterdtdr_add_listing_fields_from_modulesmodules\pricing\dashboard.php:104
actionvc_before_initmodules\pricing\page-builders\visual-composer\sf-price-range.php:2
actionvc_before_initmodules\pricing\page-builders\visual-composer\sp-add-to-cart.php:2
actionvc_before_initmodules\pricing\page-builders\visual-composer\sp-price.php:2
filterdtdr_woo_purchase_cptmodules\pricing\register-module.php:34
filterdtdr_metabox_tabsmodules\pricing\register-module.php:36
filterdtdr_settingsmodules\pricing\register-module.php:37
actionwp_enqueue_scriptsmodules\pricing\register-module.php:39
actiondtdr_addorupdate_listing_modulemodules\pricing\register-module.php:41
filterdtdr_modify_listings_args_from_modulesmodules\pricing\shortcodes.php:254
actionwoocommerce_order_status_completedmodules\pricing\utils-woocommerce.php:49
actionwoocommerce_order_status_cancelledmodules\pricing\utils-woocommerce.php:111
actionwoocommerce_order_status_refundedmodules\pricing\utils-woocommerce.php:112
actiondelete_usermodules\pricing\utils-woocommerce.php:160
actionvc_before_initmodules\search\page-builders\visual-composer\sf-categories.php:2
actionvc_before_initmodules\search\page-builders\visual-composer\sf-ctype.php:2
actionvc_before_initmodules\search\page-builders\visual-composer\sf-features.php:2
actionvc_before_initmodules\search\page-builders\visual-composer\sf-keyword.php:2
actionvc_before_initmodules\search\page-builders\visual-composer\sf-mls-number.php:2
actionvc_before_initmodules\search\page-builders\visual-composer\sf-order-by.php:2
actionvc_before_initmodules\search\page-builders\visual-composer\sf-output-data-container.php:2
actionvc_before_initmodules\search\page-builders\visual-composer\sf-submit-button.php:2
actionvc_before_initmodules\search\page-builders\visual-composer\sf-tags.php:2
actionwp_enqueue_scriptsmodules\search\register-module.php:36
actionvc_before_initmodules\social-share\page-builders\visual-composer\sp-social-share.php:2
actionwp_enqueue_scriptsmodules\social-share\register-module.php:34
actionelementor/elements/categories_registeredpage-builders\elementor\register-elementor.php:33
actionelementor/widgets/widgets_registeredpage-builders\elementor\register-elementor.php:35
actionelementor/frontend/after_register_stylespage-builders\elementor\register-elementor.php:37
actionelementor/frontend/after_register_scriptspage-builders\elementor\register-elementor.php:38
actionelementor/preview/enqueue_stylespage-builders\elementor\register-elementor.php:40
actionvc_before_initpage-builders\visual-composer\modules\default\incharges.php:2
actionvc_before_initpage-builders\visual-composer\modules\default\listings-listing.php:2
actionvc_before_initpage-builders\visual-composer\modules\default\listings-map.php:2
actionvc_before_initpage-builders\visual-composer\modules\default\listings-taxonomy.php:2
actionvc_before_initpage-builders\visual-composer\modules\default\login-logout-links.php:2
actionvc_before_initpage-builders\visual-composer\modules\default\sellers.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\author.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\average-rating.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\comment-form.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\comment-list.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\comments.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\contact-details-request.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\contact-details.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\contact-form.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\dates.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\featured-image.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\featured-item.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\features.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\floor-plan.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\mls-number.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\post-date.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\post-dates.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\price.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\social-links.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\social-share.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\taxonomy.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\utils.php:2
actionvc_before_initpage-builders\visual-composer\modules\single-page\video.php:2
actionadmin_enqueue_scriptspage-builders\visual-composer\register-visual-composer.php:27
actionafter_setup_themepage-builders\visual-composer\register-visual-composer.php:28
actionadmin_enqueue_scriptsscript-and-styles.php:28
actionwp_enqueue_scriptsscript-and-styles.php:29
actionwp_enqueue_scriptsscript-and-styles.php:30
filterlisting_labelsettings\settings-utils.php:464
filtercontracttype_labelsettings\settings-utils.php:482
filteramenity_labelsettings\settings-utils.php:500
filterseller_labelsettings\settings-utils.php:518
filterincharge_labelsettings\settings-utils.php:536
actiondtdr_before_main_contenttheme-support\class-default.php:28
actiondtdr_after_main_contenttheme-support\class-default.php:29
actiondtdr_before_contenttheme-support\class-default.php:31
actiondtdr_after_contenttheme-support\class-default.php:32
filterhouzy_header_footer_default_cpttheme-support\class-designthemes-houzy.php:28
actiondtdr_before_main_contenttheme-support\class-designthemes-houzy.php:30
actiondtdr_after_main_contenttheme-support\class-designthemes-houzy.php:31
actiondtdr_before_contenttheme-support\class-designthemes-houzy.php:33
actiondtdr_after_contenttheme-support\class-designthemes-houzy.php:34
filtercs_metabox_optionstheme-support\class-designthemes-houzy.php:36
filter_theme_name_header_footer_default_cpttheme-support\class-designthemes.php:28
actiondtdr_before_main_contenttheme-support\class-designthemes.php:30
actiondtdr_after_main_contenttheme-support\class-designthemes.php:31
actiondtdr_before_contenttheme-support\class-designthemes.php:33
actiondtdr_after_contenttheme-support\class-designthemes.php:34
filtercs_metabox_optionstheme-support\class-designthemes.php:36
filtercomments_templateutils\utils-comment.php:20
actiondtdr_check_for_users_eventutils\utils-events.php:14
actionadmin_initutils\utils.php:455

Scheduled Events 1

dtdr_check_for_users_event
Maintenance & Trust

DT Directory Lite Addon Maintenance & Trust

Maintenance Signals

WordPress version tested5.9.13
Last updatedSep 17, 2022
PHP min version7.1
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

DT Directory Lite Addon Developer Profile

Wedesigntech

2 plugins · 20 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect DT Directory Lite Addon

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/dt-directory-lite-addon/modules/custom-post-type.php/wp-content/plugins/dt-directory-lite-addon/templates/tpl-single-listing.php/wp-content/plugins/dt-directory-lite-addon/page-builders/visual-composer/register-visual-composer.php/wp-content/plugins/dt-directory-lite-addon/page-builders/elementor/register-elementor.php/wp-content/plugins/dt-directory-lite-addon/woocommerce/woocommerce.php/wp-content/plugins/dt-directory-lite-addon/script-and-styles.php

HTML / DOM Fingerprints

CSS Classes
dtdr-listings
HTML Comments
<!-- Directory Listings Single Page Template -->
Data Attributes
data-post_type="dtdr_listings"data-taxonomy="dtdr_listings_category"data-taxonomy="dtdr_listings_amenity"data-taxonomy="dtdr_listings_ctype"
JS Globals
window.dtdr_lite_ajax_object
REST Endpoints
/wp-json/dtdr-lite/v1/get_listings/wp-json/dtdr-lite/v1/get_listing/wp-json/dtdr-lite/v1/get_listing_categories/wp-json/dtdr-lite/v1/get_listing_amenities/wp-json/dtdr-lite/v1/get_listing_contract_types
Shortcode Output
[dtdr_listings_filter][dtdr_listings_search][dtdr_listings][dtdr_listing_details]
FAQ

Frequently Asked Questions about DT Directory Lite Addon