PicPoints – Interactive SVG Image Maps, Hotspots Builder Security & Risk Analysis

wordpress.org/plugins/picpoints

Best WordPress interactive image map plugin to create responsive floor plans, shoppable lookbooks, SVG vector shapes, and clickable photo hotspots.

10 active installs v1.12.1 PHP 7.4+ WP 6.0+ Updated Jul 22, 2026
clickable-mapfloor-planhotspotsinteractive-mapsvg-map
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is PicPoints – Interactive SVG Image Maps, Hotspots Builder Safe to Use in 2026?

Generally Safe

Score 100/100

PicPoints – Interactive SVG Image Maps, Hotspots Builder has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The picpoints plugin v1.0.0 exhibits a strong security posture based on the provided static analysis. There are no identified entry points in the attack surface, meaning no AJAX handlers, REST API routes, shortcodes, or cron events are exposed. This significantly reduces the potential for external code execution or manipulation. Furthermore, the code demonstrates excellent security practices with 100% of SQL queries using prepared statements and 100% of outputs being properly escaped. The absence of dangerous functions, file operations, external HTTP requests, and the lack of taint analysis findings all point to a well-written and secure codebase.

Vulnerabilities
None known

PicPoints – Interactive SVG Image Maps, Hotspots Builder Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

PicPoints – Interactive SVG Image Maps, Hotspots Builder Release Timeline

v1.12.1Current
v1.12.0
v1.11.2
v1.11.1
v1.11.0
v1.10.1
v1.10.0
v1.9.3
v1.9.2
v1.9.1
v1.9.0
v1.8.0
v1.7.0
v1.6.2
v1.6.1
v1.6.0
v1.5.1
v1.5.0
v1.4.0
v1.3.0
Code Analysis
Analyzed Mar 17, 2026

PicPoints – Interactive SVG Image Maps, Hotspots Builder Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
8 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped8 total outputs
Attack Surface

PicPoints – Interactive SVG Image Maps, Hotspots Builder Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
filterno_texturize_shortcodesincludes\Frontend.php:6
actionplugins_loadedincludes\Plugin.php:10
actionafter_setup_themeincludes\Plugin.php:11
Maintenance & Trust

PicPoints – Interactive SVG Image Maps, Hotspots Builder Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJul 22, 2026
PHP min version7.4
Downloads2K

Community Trust

Rating100/100
Number of ratings2
Active installs10
Developer Profile

PicPoints – Interactive SVG Image Maps, Hotspots Builder Developer Profile

Yalogica

11 plugins · 170 total installs

98
trust score
Avg Security Score
97/100
Avg Patch Time
1 days
View full developer profile
Detection Fingerprints

How We Detect PicPoints – Interactive SVG Image Maps, Hotspots Builder

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/picpoints/assets/css/main.css
Version Parameters
picpoints/assets/css/main.css?ver=1.0.0

HTML / DOM Fingerprints

CSS Classes
pnts-containerpnts-hotspotspnts-hotspot
Data Attributes
data-xdata-ydata-link
Shortcode Output
<div class='pnts-container<img src='<div class='pnts-hotspots'><a class='pnts-hotspot'
FAQ

Frequently Asked Questions about PicPoints – Interactive SVG Image Maps, Hotspots Builder