
Photo Map Embed Security & Risk Analysis
wordpress.org/plugins/photo-map-embedShort Description: Turn EXIF GPS into an interactive map. Gutenberg block and shortcode. Edit pin titles; embed in seconds. No image uploads.
Is Photo Map Embed Safe to Use in 2026?
Generally Safe
Score 100/100Photo Map Embed has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.
The "photo-map-embed" plugin version 0.4.4 exhibits a generally strong security posture based on the static analysis. The absence of dangerous functions, SQL queries without prepared statements, file operations, external HTTP requests, and known vulnerabilities is highly positive. The plugin also demonstrates good practices by having a capability check in place. However, the analysis does reveal areas for improvement that could increase its security. Specifically, the lack of nonce checks on its two shortcodes presents a potential avenue for cross-site request forgery (CSRF) attacks if those shortcodes perform any sensitive actions, though the analysis indicates no direct entry points without authentication checks.
Key Concerns
- Shortcodes lack nonce checks
- Output escaping not fully implemented (27% unescaped)
Photo Map Embed Security Vulnerabilities
Photo Map Embed Release Timeline
Photo Map Embed Code Analysis
Output Escaping
Photo Map Embed Attack Surface
Shortcodes 2
WordPress Hooks 3
Maintenance & Trust
Photo Map Embed Maintenance & Trust
Maintenance Signals
Community Trust
Photo Map Embed Alternatives
WP Go Maps – Google Map, OpenStreetMap, Leaflet Map
wp-google-maps
The easiest to use WordPress map plugin! Create a custom map, map block, store locator or map widget with high quality markers.
MapPress – Google Maps, OpenStreetMap & Leaflet
mappress-google-maps-for-wordpress
Add unlimited Google Maps, Leaflet & OpenStreetMap to WordPress. Create a map, map block or store locator — no API key needed for free maps.
Map Block for Google Maps
map-block-gutenberg
Map block for Gutenberg editor powered by Google Maps. Simple. Fast. Just a map block.
Open User Map – Interactive Leaflet Maps
open-user-map
Create custom interactive maps with free Leaflet-based styles, no Google Maps API key, frontend marker submissions, search and filters.
Out of the Block: OpenStreetMap
ootb-openstreetmap
A map block for Gutenberg using OpenStreetMap and Leaflet that needs no API keys and works out of the box. Or should we say, ...Out of the Block?
Photo Map Embed Developer Profile
1 plugin · 0 total installs
How We Detect Photo Map Embed
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/photo-map-embed/assets/admin.css/wp-content/plugins/photo-map-embed/assets/admin.js/wp-content/plugins/photo-map-embed/assets/blocks.js/wp-content/plugins/photo-map-embed/assets/admin.js/wp-content/plugins/photo-map-embed/assets/blocks.jsphoto-map-embed/assets/admin.js?ver=photo-map-embed/assets/admin.css?ver=photo-map-embed/assets/blocks.js?ver=HTML / DOM Fingerprints
pmem-embed-wrappmem-helperpmem-errordata-iddata-markersdata-viewdata-styledata-widthdata-height+1 morepmemDefaults<div class="pmem-helper" style="border:1px solid #e5e7eb;border-radius:12px;padding:16px;background:#f8fafc;"><div class="pmem-error">Photo Map Embed: invalid markers JSON.</div><div class="pmem-error">Photo Map Embed: invalid view JSON.</div>