Directory Listings WordPress plugin · Security record
Is Directory Listings WordPress plugin safe?
10 known vulnerabilities affect the current version (2.2.0), and they have no fix yet.
Checked 1 day ago against the WPVulnerability database, for version 2.2.0.
How it’s looked after
- Last release
- Apr 15, 2025 (1 year ago)
- Releases in the last year
- 0
- Tested up to
- WordPress 6.7.11 (current: 7.1)
- Active installs
- 1K+
43 known vulnerabilities
- 7 critical
- 11 high
- 9 medium
- 16 not rated
10 affect the current version. 10 have no fix yet.
Disclosed each year
- 202122
- 20241
- 20257
- 20265
Every known vulnerability in Directory Listings WordPress plugin
Newest first, with any that affect the current version at the top.
- critical
SQL Injection vulnerability
Affects the current version · No fix yet · CVE-2026-62031 · Oct 10, 2026 · CVE
Affects the current version · No fix yet · CVE-2026-62033 · Oct 10, 2026 · CVE
Affects the current version · No fix yet · CVE-2026-27392 · Jul 22, 2026 · Wordfence
Affects the current version · No fix yet · CVE-2026-27391 · Jul 22, 2026 · Wordfence
Affects the current version · No fix yet · CVE-2026-28078 · Feb 26, 2026 · Wordfence
Affects the current version · No fix yet · CVE-2026-28138 · Apr 22, 2025 · Wordfence
Affects the current version · No fix yet · CVE-2025-32662 · Apr 15, 2025 · Wordfence
Affects the current version · No fix yet · CVE-2025-32122 · Apr 4, 2025 · Wordfence
Affects the current version · No fix yet · CVE-2025-1653 · Mar 14, 2025 · Wordfence
Affects the current version · No fix yet · CVE-2025-1657 · Mar 14, 2025 · Wordfence
- critical
Unauthenticated SQL Injection
Fixed in 2.1.7 · CVE-2025-25150 · Feb 3, 2025 · Wordfence
Fixed in 2.1.7 · CVE-2025-25151 · Feb 3, 2025 · Wordfence
Fixed in 2.1.6 · CVE-2024-47344 · Sep 27, 2024 · Wordfence
Fixed in 1.7 · CVE-2021-4340 · Oct 28, 2021 · Wordfence
Fixed in 2.0.9 · Sep 6, 2021 · Wordfence
- critical
Privilege Escalation
Fixed in 2.0.6 · CVE-2021-36879 · Jul 27, 2021 · Wordfence
Fixed in 2.0.6 · CVE-2021-36878 · Jul 27, 2021 · Wordfence
Fixed in 2.0.6 · CVE-2021-36877 · Jul 27, 2021 · Wordfence
Fixed in 2.0.6 · CVE-2021-36876 · Jul 27, 2021 · Wordfence
Fixed in 2.0.6 · CVE-2021-36875 · Jul 27, 2021 · Wordfence
Fixed in 2.0.6 · CVE-2021-36874 · Jul 27, 2021 · Wordfence
Fixed in 2.0.4 · CVE-2021-36880 · Jul 26, 2021 · Wordfence
Fixed in 1.7 · CVE-2021-4381 · Jan 28, 2021 · Wordfence
- critical
Missing Authorization
Fixed in 1.7 · CVE-2021-4370 · Jan 28, 2021 · Wordfence
Fixed in 1.7 · CVE-2021-4357 · Jan 28, 2021 · Wordfence
Fixed in 1.7 · CVE-2021-4345 · Jan 28, 2021 · Wordfence
Fixed in 1.7 · CVE-2021-4346 · Jan 28, 2021 · Wordfence
Fixed in 1.7 · CVE-2021-4343 · Jan 28, 2021 · Wordfence
Fixed in 1.7 · CVE-2021-4341 · Jan 28, 2021 · Wordfence
Fixed in 1.7 · CVE-2021-4339 · Jan 28, 2021 · Wordfence
Fixed in 1.7 · Jan 28, 2021 · Patchstack
Fixed in 1.7 · Jan 28, 2021 · Patchstack
Fixed in 1.7 · Jan 28, 2021 · Patchstack
Fixed in 1.7 · Jan 28, 2021 · Patchstack
Fixed in 1.7 · Jan 28, 2021 · Patchstack
Fixed in 1.7 · WPScan
Fixed in 1.7 · WPScan
Fixed in 1.7 · WPScan
Fixed in 1.7 · WPScan
Fixed in 1.7 · WPScan
Fixed in 1.7 · WPScan
Fixed in 1.7 · WPScan
Fixed in 2.0.9 · WPScan
Questions about Directory Listings WordPress plugin’s security
Is Directory Listings WordPress plugin safe to use?
Yes: 10 known vulnerabilities affect version 2.2.0, according to WPVulnerability’s database. Until a fixed version is out, weigh the risk, or switch to an alternative.
Does Directory Listings WordPress plugin have known security vulnerabilities?
Yes: 10 known vulnerabilities affect version 2.2.0, according to WPVulnerability’s database.
Is Directory Listings WordPress plugin still maintained?
Its last release was 1 year ago, so it may no longer be actively maintained. No support threads were opened in the last two months.
Is Directory Listings WordPress plugin compatible with the latest WordPress?
Directory Listings WordPress plugin’s readme says it’s tested up to WordPress 6.7.11, while the current version is 7.1. That doesn’t mean it breaks, but its author hasn’t confirmed it works with the latest releases.
Hear about the next one first
Track your plugin on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every plugin updated.