GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

80 Quality Score

Active Installs

18/30

With 10,000 active installs, GeoDirectory sits in a mid-tier range, well behind leading directory plugins like Directorist at 20,000 installs but ahead of niche competitors.

Update Freshness

25/25

The plugin was updated within days of this review, showing an active development team that keeps pace with WordPress releases.

User Rating

14/15

A 96 out of 100 rating from 715 users signals strong, consistent satisfaction across a meaningful sample of reviews.

Support Health

8/15

All 11 recent support threads have been resolved, indicating responsive help even if the overall thread volume is modest.

WP Compatibility

15/15

Tested with WordPress 7.0 and supporting PHP 5.6 onward, GeoDirectory works on a very wide range of hosting environments.

Scores higher than 78% of indexed plugins

About

A superb WordPress Business Directory plugin to create a local business directory, classified ads directory, or job listings board.

Active Installs 10k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-25 12:48am GMT

Requires WordPress 6.0+

Tested Up To 7.1.2

Requires PHP 5.6+

Security History

29 known vulnerabilities, all patched

1 Critical 8 High 20 Medium

Most recent: September 24, 2026

View details ▸

GeoDirectory <= 2.8.183 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'business_hours' Parameter Medium

September 24, 2026 Patched in ["2.8.184"] CVE-2026-96766

GeoDirectory <= 2.8.181 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Text-type Custom Field (e.g., 'phone') Medium

September 24, 2026 Patched in ["2.8.182"] CVE-2026-93897

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.174 - Unauthenticated SQL Injection High

September 2, 2026 Patched in ["2.8.175"] CVE-2026-84813

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.176 - Cross-Site Request Forgery Medium

August 26, 2026 Patched in ["2.8.177"] CVE-2026-81271

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.173 - Unauthenticated Stored Cross-Site Scripting High

August 19, 2026 Patched in ["2.8.174"] CVE-2026-66604

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.177 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 18, 2026 Patched in ["2.8.178"] CVE-2026-68565

GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision High

August 11, 2026 Patched in ["2.8.170"] CVE-2026-19091

GeoDirectory <= 2.8.168 - Unauthenticated Pending/Draft Listing Disclosure Medium

August 3, 2026 Patched in ["2.8.169"] CVE-2026-16988

GeoDirectory <= 2.8.109 - Authenticated (Editor+) Stored Cross-Site Scripting Medium

July 28, 2026 Patched in ["2.8.110"] CVE-2025-15677

GeoDirectory <= 2.8.167 - Information Exposure to Authenticated (Contributor+) User Email Disclosure Medium

July 27, 2026 Patched in ["2.8.168"] CVE-2026-16968

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.161 - Authenticated (Subscriber+) Server-Side Request Forgery Medium

June 30, 2026 Patched in ["2.8.162"] CVE-2026-57681

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.162 - Unauthenticated SQL Injection High

June 17, 2026 Patched in ["2.8.163"] CVE-2026-54831

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.157 - Missing Authorization Medium

May 13, 2026 Patched in ["2.8.158"] CVE-2026-42671

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.152 - Unauthenticated SQL Injection High

April 13, 2026 Patched in ["2.8.154"] CVE-2026-39512

GeoDirectory <= 2.8.149 - Cross-Site Request Forgery Medium

January 23, 2026 Patched in ["2.8.150"] CVE-2026-24549

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment Medium

November 11, 2025 Patched in ["2.8.140"] CVE-2025-12833

GeoDirectory <= 2.8.119 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

June 20, 2025 Patched in ["2.8.120"] CVE-2025-6200

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter Medium

February 10, 2025 Patched in ["2.8.98"] CVE-2024-13506

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Unauthenticated SQL Injection High

January 29, 2025 Patched in ["2.8.98"] CVE-2024-13507

GeoDirectory <= 2.3.84 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

December 30, 2024 Patched in ["2.3.85"] CVE-2024-56259

GeoDirectory <= 2.3.80 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

October 24, 2024 Patched in ["2.3.81"] CVE-2024-50437

GeoDirectory <= 2.3.61 - Authenticated (Subscriber+) SQL Injection Critical

August 7, 2024 Patched in ["2.3.62"] CVE-2024-43145

GeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode Medium

April 22, 2024 Patched in ["2.3.49"] CVE-2024-3732

GeoDirectory <= 2.3.28 - Authenticated(Administrator+) SQL Injection Medium

December 21, 2023 Patched in ["2.3.29"] CVE-2023-50845

GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby High

October 18, 2023 Patched in ["2.3.29"]

GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection High

January 31, 2023 Patched in ["2.2.24"] CVE-2023-0278

GeoDirectory <= 2.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Medium

December 29, 2022 Patched in ["2.2.22"] CVE-2022-4775

GeoDirectory <= 2.2.19 - CSV Injection Medium

December 20, 2022 Patched in ["2.2.20"]

GeoDirectory <= 2.1.1.2 - Authenticated (admin+) Stored Cross-Site Scripting Medium

September 2, 2021 Patched in ["2.1.1.3"] CVE-2021-24720

What It Does

GeoDirectory turns a WordPress site into a fully functional business directory, classifieds platform, or job listings board. Site owners can create custom listing categories, accept submissions from visitors, and let users search and filter by location or category. It includes tools for managing reviews, ratings, and map-based discovery.

Who It's For

This plugin is best for site owners running a local business directory, regional classifieds portal, or niche listings community who want full control over the structure and monetization. It suits operators with some WordPress experience who plan to scale listings into the hundreds or thousands. Small business owners looking for a simple contact page will find it overkill.

Who Should Skip It

If you just need a basic contact list, a single location map, or a simple classifieds board with a handful of posts, GeoDirectory's feature depth will feel burdensome. Bloggers and small site owners wanting a lightweight solution should look at simpler alternatives instead.

The Bottom Line

GeoDirectory earns an 87.31 out of 100, ranking as the top-scored option in this category thanks to excellent maintenance, top-tier ratings, and strong support. It is the right pick for serious directory operators who want a mature, actively maintained platform. Hobbyists or anyone needing a quick contact page should look elsewhere.

Pick this if you want a more AI-driven setup flow and lighter footprint for a pure classifieds site.

Directorist: AI-Powered Business Directory, Listings & Classified Ads 87/100

Choose Directorist if you want roughly double the install base and a more modern, AI-assisted onboarding experience.

Advanced Queries 80/100

Pick this if you only need to query and display existing WordPress posts as a directory rather than run a full listings platform.

HivePress – Business Directory, Listings & Classified Ads Plugin 80/100

Choose Hivepress if you prefer a marketplace-style interface with paid listing monetization baked in from the start.

Link Library 80/100

Pick this if your directory needs are really just a categorized list of external links or simple references rather than full business listings.