Does WP Directory Kit have any unpatched vulnerabilities?

No. All known vulnerabilities in WP Directory Kit have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is WP Directory Kit compatible with WordPress 6.9.4?

According to WordPress.org data, WP Directory Kit 1.5.1 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

Is WP Directory Kit compatible with PHP 7.0+?

WP Directory Kit requires PHP 7.0 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is WP Directory Kit updated?

WP Directory Kit was last updated on Mar 10, 2026. Frequent updates are generally a positive security signal.

What is WP Directory Kit's security score?

WP Directory Kit has a WP-Safety security score of 75/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

WP Directory Kit Security & Risk Analysis

wordpress.org/plugins/wpdirectorykit

Build your Directory portal, demos for Real Estate Agency and Car Dealership included

3K active installs v1.5.1 PHP 7.0+ WP 5.2+ Updated Mar 10, 2026

business-directorydirectorydirectory-pluginlistingreal-estate

B · Generally Safe

CVEs total19

Unpatched0

Last CVEJan 23, 2026

Plugin page Download

Safety Verdict

Is WP Directory Kit Safe to Use in 2026?

Mostly Safe

Score 75/100

WP Directory Kit is generally safe to use. 19 past CVEs were resolved. Keep it updated.

19 known CVEsLast CVE: Jan 23, 2026Updated 24d ago

Risk Assessment

The wpdirectorykit plugin exhibits a mixed security posture. While it demonstrates a commendable effort in using prepared statements for the majority of its SQL queries and properly escaping a significant portion of its output, several concerning aspects are evident. The presence of unprotected AJAX handlers and REST API routes represents a direct attack vector that could be exploited by unauthorized users, especially given the plugin's history of security vulnerabilities.

The static analysis reveals a moderate attack surface with a notable number of unprotected entry points, specifically 4 out of 16. The taint analysis, while not flagging critical or high severity issues, shows a concerning number of flows with unsanitized paths, indicating a potential for path traversal vulnerabilities if these paths are user-controlled. The plugin's vulnerability history is a significant red flag. With a total of 19 known CVEs, including critical and high severity issues spanning a wide range of common web application vulnerabilities, it suggests a pattern of insecure coding practices.

Despite the positive aspects like the use of prepared statements and output escaping, the plugin's past and current unprotected entry points, coupled with its extensive vulnerability history, present a substantial risk. The last vulnerability recorded in 2026 also raises questions about its ongoing maintenance and security responsiveness. Users should exercise extreme caution, and a thorough audit and patching process would be highly recommended before deploying this plugin.

Key Concerns

Unprotected AJAX handlers
Unprotected REST API routes
Flows with unsanitized paths found
Large number of known CVEs (19 total)
Previous critical severity vulnerabilities
Previous high severity vulnerabilities
Bundled outdated library (Freemius v1.0)

Vulnerabilities

WP Directory Kit Security Vulnerabilities

CVEs by Year

8 CVEs in 2023

2023

4 CVEs in 2024

2024

6 CVEs in 2025

2025

1 CVE in 2026

2026

Patched Has unpatched

Severity Breakdown

Critical

High

Medium

Low

19 total CVEs

CVE-2025-13920medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

WP Directory Kit <= 1.4.9 - Unauthenticated Email Exposure via wdk_public_action

Jan 23, 2026 Patched in 1.5.0 (1d)

CVE-2025-13089high · 7.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

WP Directory Kit <= 1.4.7 - Unauthenticated SQL Injection

Dec 12, 2025 Patched in 1.4.8 (1d)

CVE-2025-13390critical · 10Incorrect Implementation of Authentication Algorithm

WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover

Dec 3, 2025 Patched in 1.4.5 (1d)

CVE-2025-13090medium · 4.9Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

WP Directory Kit <= 1.4.6 - Authenticated (Admin+) SQL Injection

Dec 1, 2025 Patched in 1.4.7 (1d)

CVE-2025-13525medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Directory Kit <= 1.4.5 - Reflected Cross-Site Scripting via 'order_by' Parameter

Nov 26, 2025 Patched in 1.4.6 (1d)

CVE-2025-13138high · 7.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function

Nov 20, 2025 Patched in 1.4.4 (1d)

CVE-2025-60120medium · 5.3Missing Authorization

WP Directory Kit <= 1.4.0 - Missing Authorization

Sep 26, 2025 Patched in 1.4.1 (26d)

CVE-2024-37487medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Directory Kit <= 1.3.5 - Reflected Cross-Site Scripting

Jul 4, 2024 Patched in 1.3.6 (7d)

CVE-2024-37253low · 2.7Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

WP Directory Kit <= 1.3.6 - Authenticated (Admin+) HTML Injection

Jun 26, 2024 Patched in 1.3.7 (28d)

CVE-2024-3217high · 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection

Apr 4, 2024 Patched in 1.3.1 (1d)

CVE-2024-29774medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Directory Kit <= 1.2.9 - Reflected Cross-Site Scripting

Mar 25, 2024 Patched in 1.3.0 (8d)

CVE-2023-41875medium · 5.3Missing Authorization

WP Directory Kit <= 1.2.6 - Missing Authorization

Sep 5, 2023 Patched in 1.2.7 (140d)

CVE-2023-2351medium · 6.5Missing Authorization

WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action

Jun 12, 2023 Patched in 1.2.4 (225d)

CVE-2023-2835medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search'

Jun 1, 2023 Patched in 1.2.4 (236d)

CVE-2023-2278critical · 9.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action

May 26, 2023 Patched in 1.2.0 (242d)

CVE-2023-2280medium · 6.5Missing Authorization

WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_action

May 2, 2023 Patched in 1.2.3 (266d)

CVE-2023-2277medium · 6.1Cross-Site Request Forgery (CSRF)

WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem

Apr 28, 2023 Patched in 1.2.0 (270d)

CVE-2023-2279medium · 5.4Cross-Site Request Forgery (CSRF)

WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_display

Apr 28, 2023 Patched in 1.2.2 (270d)

CVE-2023-31229medium · 5.4URL Redirection to Untrusted Site ('Open Redirect')

WP Directory Kit <= 1.1.9 - Open Redirect

Apr 27, 2023 Patched in 1.2.0 (271d)

Code Analysis

Analyzed Mar 16, 2026

WP Directory Kit Code Analysis

Dangerous Functions

Raw SQL Queries

67 prepared

Unescaped Output

1527

5304 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Select2Freemius1.0

SQL Query Safety

74% prepared91 total queries

Output Escaping

78% escaped6831 total outputs

Data Flows

13 unsanitized

Data Flow Analysis

24 flows13 with unsanitized paths

wdk_prepare_search_query_GET (application\helpers\Basic.php:386)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

4 unprotected

WP Directory Kit Attack Surface

Entry Points16

Unprotected4

AJAX Handlers 6

authwp_ajax_wdk_handle_live_editorelementor-elements\elementor-init.php:85

authwp_ajax_wdk_update_filterelementor-elements\elementor-init.php:86

authwp_ajax_wpdirectorykit_review_actionincludes\class-wpdirectorykit-review-request.php:51

authwp_ajax_wdk_admin_actionincludes\class-wpdirectorykit.php:229

authwp_ajax_wdk_public_actionincludes\class-wpdirectorykit.php:252

noprivwp_ajax_wdk_public_actionincludes\class-wpdirectorykit.php:258

REST API Routes 1

GET/wp-json/wdk-blocks/v1/last-listingsblocks\inc\block-product-field\block-product-field.php:40

Shortcodes 9

[wdk-latest-listings-list] shortcodes\shortcode-latest-listings-list.php:23

[wdk-listing-field-label] shortcodes\shortcode-wdk-listing-field-label.php:19

[wdk-listing-field-value-prefix] shortcodes\shortcode-wdk-listing-field-value-prefix.php:19

[wdk-listing-field-value-suffix] shortcodes\shortcode-wdk-listing-field-value-suffix.php:19

[wdk-listing-field-value-text] shortcodes\shortcode-wdk-listing-field-value-text.php:19

[link] shortcodes\shortcode-wdk-listing-field-value-text.php:132

[wdk-listing-field-value] shortcodes\shortcode-wdk-listing-field-value.php:19

[wdk-listing-fields-section] shortcodes\shortcode-wdk-listing-fields-section.php:25

[wdk-return-post-id] shortcodes\shortcode-wdk-return-post-id.php:13

WordPress Hooks 192

actiondelete_useractions.php:27

actionwp_footeractions.php:36

filterintermediate_image_sizes_advancedactions.php:96

actionwdk-membership/listing/savedactions.php:104

filterposts_clausesactions.php:116

actionwpdirectorykit/elementor-elements/register_widgetapplication\controllers\Wdk_settings.php:648

actionwpdirectorykit/elementor-elements/register_widgetapplication\controllers\Wdk_settings.php:652

actioneli/includesapplication\controllers\Wdk_settings.php:653

actioneli/register_widgetapplication\controllers\Wdk_settings.php:657

actionwpdirectorykit/elementor-elements/register_widgetapplication\controllers\Wdk_settings.php:663

actionwpdirectorykit/elementor-elements/register_widgetapplication\controllers\Wdk_settings.php:832

actionwpdirectorykit/elementor-elements/register_widgetapplication\controllers\Wdk_settings.php:836

actioneli/includesapplication\controllers\Wdk_settings.php:837

actioneli/register_widgetapplication\controllers\Wdk_settings.php:841

actionwpdirectorykit/elementor-elements/register_widgetapplication\controllers\Wdk_settings.php:847

actionwpdirectorykit/elementor-elements/register_widgetapplication\controllers\Wdk_settings.php:883

actionwpdirectorykit/elementor-elements/register_widgetapplication\controllers\Wdk_settings.php:887

actioneli/includesapplication\controllers\Wdk_settings.php:888

actioneli/register_widgetapplication\controllers\Wdk_settings.php:892

actionwpdirectorykit/elementor-elements/register_widgetapplication\controllers\Wdk_settings.php:898

actionwdk-membership/elementor-elements/register_widgetapplication\controllers\Wdk_settings.php:1863

actionwdk-membership/elementor-elements/register_widgetapplication\controllers\Wdk_settings.php:1867

actioneli/includesapplication\controllers\Wdk_settings.php:1868

actioneli/register_widgetapplication\controllers\Wdk_settings.php:1872

actionwdk-membership/elementor-elements/register_widgetapplication\controllers\Wdk_settings.php:1878

filterwpml_ls_language_urlapplication\helpers\Basic.php:4994

actionwdk/helpers/wdk_listing_images/get_attached/beforeapplication\views\frontend\result_item_card.php:83

filterblock_categories_allblocks\blocks-init.php:23

actionenqueue_block_editor_assetsblocks\inc\block-product-field\block-product-field.php:36

actionenqueue_block_assetsblocks\inc\block-product-field\block-product-field.php:37

actionrest_api_initblocks\inc\block-product-field\block-product-field.php:46

actioninitblocks\inc\block-product-field\block-product-field.php:122

actionenqueue_block_editor_assetsblocks\inc\block-share\block-share.php:32

actionenqueue_block_assetsblocks\inc\block-share\block-share.php:33

actioninitblocks\inc\block-share\block-share.php:37

actioninitcustom_post_type.php:70

actionshow_user_profilecustom_user_fields.php:11

actionedit_user_profilecustom_user_fields.php:12

actionpersonal_options_updatecustom_user_fields.php:37

actionedit_user_profile_updatecustom_user_fields.php:38

actioninitcustom_user_roles.php:7

actionadmin_enqueue_scriptsdash-widgets\dash-widgets-init.php:27

actionadmin_enqueue_scriptsdash-widgets\dash-widgets-init.php:28

actionwp_dashboard_setupdash-widgets\dash-widgets-init.php:119

actionwp_dashboard_setupdash-widgets\dash-widgets-init.php:120

actionwp_dashboard_setupdash-widgets\dash-widgets-init.php:121

actionwp_dashboard_setupdash-widgets\dash-widgets-init.php:122

actionwp_dashboard_setupdash-widgets\dash-widgets-init.php:123

actionwp_dashboard_setupdash-widgets\dash-widgets-init.php:124

actionelementor/editor/after_enqueue_styleselementor-elements\classes\wdk-field-icon.php:47

actionelementor/editor/after_enqueue_styleselementor-elements\classes\wdk-field-label.php:47

actionelementor/editor/after_enqueue_styleselementor-elements\classes\wdk-field-value.php:50

actionelementor/editor/after_enqueue_styleselementor-elements\classes\wdk-implode-shortcode.php:47

actionelementor/editor/after_enqueue_styleselementor-elements\classes\wdk-last-search.php:44

actionelementor/editor/after_enqueue_styleselementor-elements\classes\wdk-listing-agent-field.php:47

actionelementor/controls/registerelementor-elements\elementor-init.php:83

actionelementor/editor/before_enqueue_styleselementor-elements\elementor-init.php:89

actionelementor/editor/after_enqueue_styleselementor-elements\elementor-init.php:90

actionelementor/editor/after_enqueue_scriptselementor-elements\elementor-init.php:91

actionwp_enqueue_scriptselementor-elements\elementor-init.php:602

actionwp_enqueue_scriptselementor-elements\elementor-init.php:603

actionelementor/elements/categories_registeredelementor-elements\elementor-init.php:605

actionelementor/widgets/registerelementor-elements\elementor-init.php:606

actionelementor/initelementor-elements\elementor-init.php:619

actionwpdirectorykit/elementor-elements/register_widget/listingelementor-elements\elementor-init.php:638

actioneli/includeselementor-elements\elementor-init.php:639

actioneli/register_widgetelementor-elements\elementor-init.php:643

actionwpdirectorykit/elementor-elements/register_widgetelementor-elements\elementor-init.php:652

actioninitelementor-extensions\class-ajax-handler.php:29

actioneli/ajax-handler/afterelementor-extensions\class-ajax-handler.php:30

filtereli/ajax-handler/filter_from_dataelementor-extensions\class-ajax-handler.php:31

filtereli/ajax-handler/filter_outputelementor-extensions\class-ajax-handler.php:372

filtereli/ajax-handler/filter_outputelementor-extensions\class-ajax-handler.php:379

filtereli/ajax-handler/filter_outputelementor-extensions\class-ajax-handler.php:469

filtereli/ajax-handler/filter_outputelementor-extensions\class-ajax-handler.php:568

filtereli/ajax-handler/filter_outputelementor-extensions\class-ajax-handler.php:575

filtereli/ajax-handler/filter_outputelementor-extensions\class-ajax-handler.php:666

filtereli/ajax-handler/filter_outputelementor-extensions\class-ajax-handler.php:673

filtereli/ajax-handler/filter_outputelementor-extensions\class-ajax-handler.php:782

filtereli/ajax-handler/filter_from_dataelementor-extensions\class-ajax-handler.php:786

filtereli/ajax-handler/filter_outputelementor-extensions\class-ajax-handler.php:795

actionelementor/initelementor-extensions\class-hider-addons.php:10

actionelementor/frontend/after_enqueue_scriptselementor-extensions\class-hider-addons.php:176

actionelementor/frontend/after_enqueue_styleselementor-extensions\class-hider-addons.php:179

actionelementor/frontend/widget/before_renderelementor-extensions\class-hider-addons.php:286

actionelementor/frontend/widget/after_renderelementor-extensions\class-hider-addons.php:287

actionelementor/frontend/section/before_renderelementor-extensions\class-hider-addons.php:290

actionelementor/frontend/section/after_renderelementor-extensions\class-hider-addons.php:291

actionelementor/frontend/container/before_renderelementor-extensions\class-hider-addons.php:294

actionelementor/frontend/container/after_renderelementor-extensions\class-hider-addons.php:295

actionelementor/frontend/column/before_renderelementor-extensions\class-hider-addons.php:298

actionelementor/frontend/column/after_renderelementor-extensions\class-hider-addons.php:299

actionelementor/initelementor-extensions\class-hider.php:10

actionelementor/frontend/after_enqueue_scriptselementor-extensions\class-hider.php:85

actionelementor/frontend/after_enqueue_styleselementor-extensions\class-hider.php:88

actionelementor/frontend/widget/before_renderelementor-extensions\class-hider.php:195

actionelementor/frontend/widget/after_renderelementor-extensions\class-hider.php:196

actionelementor/frontend/section/before_renderelementor-extensions\class-hider.php:199

actionelementor/frontend/section/after_renderelementor-extensions\class-hider.php:200

actionelementor/frontend/container/before_renderelementor-extensions\class-hider.php:203

actionelementor/frontend/container/after_renderelementor-extensions\class-hider.php:204

actionelementor/frontend/column/before_renderelementor-extensions\class-hider.php:207

actionelementor/frontend/column/after_renderelementor-extensions\class-hider.php:208

actionelementor/element/before_section_endelementor-extensions\wdk-listing-card-button.php:179

actionelementor/element/wdk-listing-card-field-icon/tab_conf_main_section/before_section_endelementor-extensions\wdk-listing-card-field-icon.php:73

actionelementor/element/before_section_endelementor-extensions\wdk-listing-card-field-label.php:75

actionelementor/element/wdk-listing-card-field-value/tab_conf_main_section/before_section_endelementor-extensions\wdk-listing-card-field-value.php:73

actionelementor/element/before_section_endelementor-extensions\wdk-listing-card-field-value.php:115

actionelementor/element/wdk-listing-card-thumbnail/tab_conf_main_section/before_section_endelementor-extensions\wdk-listing-card-thumbnail.php:75

actionelementor/element/before_section_endelementor-extensions\wdk-listing-card-thumbnail.php:90

actionwpdirectorykit/admin/listing/edit/after_formextensions\wdk-autosuggestion-fields.php:24

actionwdk-membership/view/listing_edit/after_formextensions\wdk-autosuggestion-fields.php:25

actionwp_update_userextensions\wdk-cached-user-editor.php:21

actionwpdirectorykit/listing/savedextensions\wdk-cached-user-editor.php:22

actionwp_update_userextensions\wdk-cached-users.php:21

actioninitextensions\wdk-cached-users.php:22

actioninitextensions\wdk-cached-users.php:25

actionwpdirectorykit/admin/category/edit/after_formextensions\wdk-dependfields.php:21

actionwpdirectorykit/admin/listing/edit/after_formextensions\wdk-dependfields.php:24

actionwdk-membership/view/listing_edit/after_formextensions\wdk-dependfields.php:25

actionwp_enqueue_scriptsextensions\wdk-dependfields.php:27

actioninitfilters.php:7

filterbody_classfilters.php:13

filterthe_contentfilters.php:31

filterbody_classfilters.php:231

actionelementor/page_templates/canvas/before_contentfilters.php:232

actionelementor/page_templates/canvas/after_contentfilters.php:233

filtersingle_templatefilters.php:249

actionadmin_bar_menufilters.php:251

filterregister_post_type_argsfilters.php:279

actionwp_headfilters.php:283

actiontemplate_redirectfilters.php:316

filterwpseo_titlefilters.php:323

filterwpseo_metadescfilters.php:324

filterwpseo_opengraph_urlfilters.php:325

filterwpseo_opengraph_titlefilters.php:326

filterwpseo_opengraph_imagefilters.php:327

filterwpseo_opengraph_typefilters.php:328

filterwpseo_opengraph_descfilters.php:329

filterwpseo_frontend_presentationfilters.php:355

filterwp_kses_allowed_htmlfilters.php:357

actionwdk-membership/dash/homepage/widgetsfilters.php:371

actionwdk-membership/dash/homepage/widgetsfilters.php:394

filterwoocommerce_enable_setup_wizardfilters.php:415

actiontemplate_redirectfilters.php:419

filterplugin_action_links_wpdirectorykit/wpdirectorykit.phpfilters.php:446

filterwpdirectorykit/listing/field/valuefilters.php:458

filterwpseo_sitemap_indexfilters.php:479

filterdocument_title_partsfilters.php:483

filtertiny_mce_before_initfilters.php:501

filterinitfilters.php:513

filterwdk/listings/resultsfilters.php:526

filterbody_classfilters.php:543

actioninitincludes\class-wpdirectorykit-review-request.php:50

actionadmin_noticesincludes\class-wpdirectorykit-review-request.php:60

actionnetwork_admin_noticesincludes\class-wpdirectorykit-review-request.php:61

actionuser_admin_noticesincludes\class-wpdirectorykit-review-request.php:62

actionplugins_loadedincludes\class-wpdirectorykit.php:202

actionadmin_enqueue_scriptsincludes\class-wpdirectorykit.php:217

actionadmin_enqueue_scriptsincludes\class-wpdirectorykit.php:218

actionadmin_menuincludes\class-wpdirectorykit.php:223

actionwp_enqueue_scriptsincludes\class-wpdirectorykit.php:248

actionwp_enqueue_scriptsincludes\class-wpdirectorykit.php:249

actionplugins_loadedincludes\class-wpdirectorykit.php:309

filterajax_query_attachments_argsincludes\class-wpdirectorykit.php:349

actioninittgm-pa\class-tgm-plugin-activation.php:268

filterload_textdomain_mofiletgm-pa\class-tgm-plugin-activation.php:269

actioninittgm-pa\class-tgm-plugin-activation.php:272

actionadmin_menutgm-pa\class-tgm-plugin-activation.php:421

actionadmin_headtgm-pa\class-tgm-plugin-activation.php:422

filterinstall_plugin_complete_actionstgm-pa\class-tgm-plugin-activation.php:425

filterupdate_plugin_complete_actionstgm-pa\class-tgm-plugin-activation.php:426

actionadmin_noticestgm-pa\class-tgm-plugin-activation.php:429

actionadmin_inittgm-pa\class-tgm-plugin-activation.php:430

actionadmin_enqueue_scriptstgm-pa\class-tgm-plugin-activation.php:431

actionload-plugins.phptgm-pa\class-tgm-plugin-activation.php:436

actionswitch_themetgm-pa\class-tgm-plugin-activation.php:439

actionswitch_themetgm-pa\class-tgm-plugin-activation.php:442

actionadmin_inittgm-pa\class-tgm-plugin-activation.php:447

actionswitch_themetgm-pa\class-tgm-plugin-activation.php:452

actionload_textdomain_mofiletgm-pa\class-tgm-plugin-activation.php:475

filterupgrader_source_selectiontgm-pa\class-tgm-plugin-activation.php:889

actionplugins_loadedtgm-pa\class-tgm-plugin-activation.php:2116

filtertgmpa_table_data_itemstgm-pa\class-tgm-plugin-activation.php:2240

filterupgrader_source_selectiontgm-pa\class-tgm-plugin-activation.php:2981

actionadmin_inittgm-pa\class-tgm-plugin-activation.php:3151

actionupgrader_process_completetgm-pa\class-tgm-plugin-activation.php:3246

filterupgrader_post_installtgm-pa\class-tgm-plugin-activation.php:3305

filterupgrader_post_installtgm-pa\class-tgm-plugin-activation.php:3450

actiontgmpa_registertgm-pa\configuration.php:37

actionadmin_noticeswpdirectorykit.php:127

actionadmin_initwpdirectorykit.php:136

Maintenance & Trust

WP Directory Kit Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedMar 10, 2026

PHP min version7.0

Downloads95K

Community Trust

Rating98/100

Number of ratings34

Active installs3K

Alternatives

WP Directory Kit Alternatives

Directorist: AI-Powered Business Directory, Listings & Classified Ads

directorist

Build any type of directory website such as a business directory, job directory, classifieds directory, and more with this WordPress directory plugin.

20K 2 unpatched

Business Directory Plugin – Easy Listing Directories for WordPress

business-directory-plugin

The easy Business Directory Plugin for WordPress. Build an easy team directory, member directory, staff directory, church directory, and more.

10K 16 CVEs

Classified Listing – AI-Powered Classified ads & Business Directory Plugin

classified-listing

A Classified ads and Business Directory plugin for WordPress, to create classified listing, real estate directory, local business directory, and more.

10K 15 CVEs

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

geodirectory

A superb WordPress Business Directory plugin to create a local business directory, classified ads directory, or job listings board.

10K 16 CVEs

HivePress – Business Directory & Classified Ads Plugin

hivepress

100

A simple yet powerful plugin to create a business directory, job board, real estate, classified ads, or basically any type of directory website.

10K No CVEs

Developer Profile

WP Directory Kit Developer Profile

WPDirectoryKit

6 plugins · 4K total installs

trust score

Avg Security Score

93/100

Avg Patch Time

101 days

View full developer profile

Detection Fingerprints

How We Detect WP Directory Kit

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/wpdirectorykit/elementor-elements/assets/css/widgets/wdk-listings-list.css/wp-content/plugins/wpdirectorykit/blocks/inc/block-product-field/block.js/wp-content/plugins/wpdirectorykit/blocks/inc/block-product-field/frontend.js/wp-content/plugins/wpdirectorykit/blocks/inc/block-share/block.js/wp-content/plugins/wpdirectorykit/blocks/inc/block-share/frontend.js

Script Paths

/wp-content/plugins/wpdirectorykit/blocks/inc/block-product-field/block.js/wp-content/plugins/wpdirectorykit/blocks/inc/block-product-field/frontend.js/wp-content/plugins/wpdirectorykit/blocks/inc/block-share/block.js/wp-content/plugins/wpdirectorykit/blocks/inc/block-share/frontend.js

HTML / DOM Fingerprints

REST Endpoints

/wp-json/wdk-blocks/v1/last-listings

FAQ