Directory Listings WordPress plugin – uListing

49 Quality Score

Active Installs

14/30

With only about 1,000 active installs, it sits well behind the 9,000 to 20,000 install range of the leading directory plugins in this category.

Update Freshness

9/25

It was updated on April 15, 2025, and is confirmed compatible with WordPress 6.7.5, which is a positive sign, though the absence of a stated PHP version requirement is a minor transparency gap.

User Rating

12/15

A 78 out of 100 score from 30 ratings is decent, but the small sample size makes it hard to read long-term user satisfaction reliably.

Support Health

8/15

Zero support threads and zero resolutions is a serious red flag, suggesting either very low adoption or that users do not bother opening tickets because responses are absent.

WP Compatibility

8/15

It requires WordPress 4.6 or higher, which gives broad compatibility, but it does not declare a minimum PHP version, so older PHP environments are an unknown.

Scores higher than 3% of indexed plugins

About

This directory listings WordPress plugin is a fantastic tool for creating a professional business directory listings website on WordPress with no hass …

Active Installs 1k+

Rating ★★★½ 3.9/5

Last Updated 2025-04-15 12:11pm GMT

Requires WordPress 4.6+

Tested Up To 6.7.7

Security History

27 known vulnerabilities, all patched

9 Critical 7 High 11 Medium

Most recent: July 22, 2026

View details ▸

Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization Medium

July 22, 2026 Patched in [] CVE-2026-27392

Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization Medium

July 22, 2026 Patched in [] CVE-2026-27391

Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Editor+) Arbitrary File Download Medium

February 26, 2026 Patched in [] CVE-2026-28078

uListing <= 2.2.0 - Authenticated (Administrator+) PHP Object Injection Medium

April 22, 2025 Patched in [] CVE-2026-28138

uListing <= 2.2.0 - Authenticated (Subscriber+) PHP Object Injection High

April 15, 2025 Patched in [] CVE-2025-32662

uListing <= 2.1.9 - Authenticated (Administrator+) SQL Injection Medium

April 4, 2025 Patched in [] CVE-2025-32122

Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation High

March 14, 2025 Patched in [] CVE-2025-1653

Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection High

March 14, 2025 Patched in [] CVE-2025-1657

uListing <= 2.1.6 - Unauthenticated SQL Injection High

February 3, 2025 Patched in ["2.1.7"] CVE-2025-25150

uListing <= 2.1.6 - Authenticated (Contributor+) SQL Injection Medium

February 3, 2025 Patched in ["2.1.7"] CVE-2025-25151

uListing <= 1.6.6 - Unauthenticated SQL Injection Critical

October 28, 2021 Patched in ["1.7"] CVE-2021-4340

Listing, Classified Ads & Business Directory – uListing <= 2.0.8 - Cross-Site Request Forgery High

September 6, 2021 Patched in ["2.0.9"]

Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Privilege Escalation Critical

July 27, 2021 Patched in ["2.0.6"] CVE-2021-36879

uListing <= 2.0.5 - Cross-Site Request Forgery leading to Settings Change Medium

July 27, 2021 Patched in ["2.0.6"] CVE-2021-36878

Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Cross-Site Request Forgery Medium

July 27, 2021 Patched in ["2.0.6"] CVE-2021-36877

Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Cross-Site Request Forgery Medium

July 27, 2021 Patched in ["2.0.6"] CVE-2021-36876

Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Reflected Cross-Site Scripting Medium

July 27, 2021 Patched in ["2.0.6"] CVE-2021-36875

uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) High

July 27, 2021 Patched in ["2.0.6"] CVE-2021-36874

Listing, Classified Ads & Business Directory – uListing <= 2.0.3 - Unauthenticated SQL Injection Critical

July 26, 2021 Patched in ["2.0.4"] CVE-2021-36880

uListing <= 1.6.6 - Unauthenticated Information Disclosure High

January 28, 2021 Patched in ["1.7"] CVE-2021-4339

uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX Critical

January 28, 2021 Patched in ["1.7"] CVE-2021-4341

uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation Critical

January 28, 2021 Patched in ["1.7"] CVE-2021-4343

uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes Critical

January 28, 2021 Patched in ["1.7"] CVE-2021-4346

uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion Medium

January 28, 2021 Patched in ["1.7"] CVE-2021-4345

uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion Critical

January 28, 2021 Patched in ["1.7"] CVE-2021-4357

uListing <= 1.6.6 - Missing Authorization Critical

January 28, 2021 Patched in ["1.7"] CVE-2021-4370

uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route Critical

January 28, 2021 Patched in ["1.7"] CVE-2021-4381

What It Does

uListing is a WordPress plugin for building directory listings websites, including business directories, real estate catalogues, classified ads platforms, and service provider indexes. It provides listing creation, search, and filtering tools so site owners can run a directory without custom development.

Who It's For

It is best suited for small site owners who want a budget-friendly directory for a niche community, a local business guide, or a low-traffic classified ads board and are comfortable working through rough edges themselves. It also fits developers evaluating a lightweight listing framework they can extend with code.

Who Should Skip It

Anyone running a high-traffic or revenue-critical directory should skip this plugin, since the zero percent support resolution rate and limited install base mean you will be troubleshooting alone. Established alternatives like HivePress, Directorist, or GeoDirectory are far safer picks.

The Bottom Line

uListing covers the core directory features a small site needs, but its 1,000 installs, zero resolved support threads, and 52.61 overall quality score place it well below the category leaders. It is workable for a hobby or test project, yet most directory owners will be better served by HivePress, Directorist, or GeoDirectory.

Pick this if you want AI-assisted listing creation and a much larger user base of around 9,000 active installs with a stronger 87.11 quality score.

Directorist: AI-Powered Business Directory, Listings & Classified Ads 87/100

Choose Directorist if you need a mature, feature-rich directory plugin with around 20,000 installs and one of the highest quality scores in the category at 86.56.

GeoDirectory - WP Business Directory Plugin and Classified Listings Directory 86/100

Opt for GeoDirectory if location-based search and maps are central to your directory, given its 10,000 installs and 86.06 quality score.

Advanced Queries 80/100

Consider Advanced Queries if you only need flexible listing queries and filters rather than a full directory framework, with 10,000 installs and a solid 80.11 score.

HivePress - Business Directory, Listings & Classified Ads Plugin 80/100

Go with HivePress if you want a polished, extensible directory platform with 10,000 installs and an 80.11 quality score, plus a stronger ecosystem of extensions.