Simple Shortcode for Google Maps Security & Risk Analysis

wordpress.org/plugins/simple-google-maps-short-code

A simple shortcode for embedding Google Maps in any WordPress post, page or widget.

4K active installs v1.8.2 PHP 7.4+ WP 4.6+ Updated Mar 25, 2025
gmapsgoogle-mapsgoogle-maps-plugingoogle-maps-shortcodemaps
91
A · Safe
CVEs total1
Unpatched0
Last CVENov 7, 2024
Safety Verdict

Is Simple Shortcode for Google Maps Safe to Use in 2026?

Generally Safe

Score 91/100

Simple Shortcode for Google Maps has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

1 known CVELast CVE: Nov 7, 2024Updated 1yr ago
Risk Assessment

The "simple-google-maps-short-code" plugin, version 1.8.2, exhibits a generally good security posture based on the static analysis. The plugin has a very small attack surface, with only one shortcode and no unprotected entry points. Crucially, all SQL queries utilize prepared statements, and the vast majority of output is properly escaped, indicating a strong defense against common web vulnerabilities like SQL injection and basic XSS. The absence of dangerous functions, file operations, and external HTTP requests further bolsters its security. However, the lack of nonce checks and the presence of only two capability checks across all entry points are potential areas of concern for robust access control.

Key Concerns

  • No nonce checks present
  • Limited capability checks
  • Medium severity CVE history
Vulnerabilities
1 published

Simple Shortcode for Google Maps Security Vulnerabilities

CVEs by Year

1 CVE in 2024
2024
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2024-10621medium · 6.4Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Simple Shortcode for Google Maps <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Nov 7, 2024 Patched in 1.6 (1d)
Version History

Simple Shortcode for Google Maps Release Timeline

v1.8.2Current
v1.8.1
v1.8
v1.7
v1.6
v1.5.51 CVE
v1.5.41 CVE
v1.5.31 CVE
v1.5.21 CVE
v1.5.11 CVE
v1.51 CVE
v1.4.11 CVE
v1.4.01 CVE
v1.3.31 CVE
v1.3.21 CVE
v1.3.11 CVE
v1.31 CVE
v1.21 CVE
v1.1.21 CVE
v1.1.11 CVE
Code Analysis
Analyzed Mar 16, 2026

Simple Shortcode for Google Maps Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
31 escaped
Nonce Checks
0
Capability Checks
2
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

97% escaped32 total outputs
Attack Surface

Simple Shortcode for Google Maps Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[pw_map] simple-google-map-short-code.php:178
WordPress Hooks 3
actionadmin_menuincludes\class-pw-map-settings.php:14
actioninitsimple-google-map-short-code.php:45
actionwp_headsimple-google-map-short-code.php:269
Maintenance & Trust

Simple Shortcode for Google Maps Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedMar 25, 2025
PHP min version7.4
Downloads170K

Community Trust

Rating92/100
Number of ratings46
Active installs4K
Developer Profile

Simple Shortcode for Google Maps Developer Profile

fullworks

13 plugins · 79K total installs

74
trust score
Avg Security Score
93/100
Avg Patch Time
1299 days
View full developer profile
Detection Fingerprints

How We Detect Simple Shortcode for Google Maps

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Script Paths
https://maps.googleapis.com/maps/api/js?key=/wp-content/plugins/simple-google-maps-short-code/

HTML / DOM Fingerprints

CSS Classes
pw_map_canvas
JS Globals
pw_run_map_
Shortcode Output
<div class="pw_map_canvas" id="pw_map_map_<?php echo esc_attr( $map_id ); ?> = new google.maps.Map(document.getElementById("var location_
FAQ

Frequently Asked Questions about Simple Shortcode for Google Maps