WP-Safety

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map Security & Risk Analysis

wordpress.org/plugins/wp-google-maps

The easiest to use WordPress map plugin! Create a custom map, map block, store locator or map widget with high quality markers.

300K active installs v10.1.04 PHP 7.0+ WP 6.0+ Updated Jul 10, 2026
google-mapsleaflet-mapmapmapsstore-locator
86
A · Safe
CVEs total25
Unpatched0
Last CVEJun 19, 2026
Plugin page Download
Safety Verdict

Is WP Go Maps – Google Map, OpenStreetMap, Leaflet Map Safe to Use in 2026?

Generally Safe

Score 86/100

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

25 known CVEsLast CVE: Jun 19, 2026Updated 1mo ago
Risk Assessment

The wp-google-maps plugin, version 10.0.05, presents a significant security risk due to a combination of concerning static analysis findings and a history of numerous vulnerabilities. While it employs prepared statements for a majority of its SQL queries and shows a moderate level of output escaping, the high number of unprotected AJAX handlers (16 out of 25) is a major red flag. This directly exposes a substantial portion of the plugin's functionality to unauthenticated attackers, potentially allowing them to trigger various malicious actions.

The taint analysis further exacerbates these concerns, revealing 19 high-severity flows with unsanitized paths, indicating a strong likelihood of path traversal or similar vulnerabilities. The presence of the `unserialize` function is another critical indicator of potential remote code execution risks if not handled with extreme care and proper sanitization. Coupled with the plugin's historical pattern of 22 known CVEs, including a critical and a high-severity one, this plugin should be treated with extreme caution.

While the plugin has no currently unpatched CVEs, the sheer volume and types of past vulnerabilities, such as SQL Injection, XSS, CSRF, and Path Traversal, suggest recurring security flaws. The last vulnerability reported in 2026 indicates active development and patching, which is a positive sign. However, the overall picture suggests a plugin that, despite some good practices, has a history of significant security weaknesses and currently exhibits critical exposure points that require immediate attention and remediation.

Key Concerns

  • Large number of unprotected AJAX handlers
  • High severity taint flows with unsanitized paths
  • Presence of unserialize function
  • History of 22 known CVEs
  • Past critical severity CVE
  • Past high severity CVE
  • History of SQL Injection vulnerabilities
  • History of Path Traversal vulnerabilities
  • History of Cross-Site Scripting vulnerabilities
  • History of Missing Authorization vulnerabilities
  • Bundled library (DataTables) not analyzed for version/patch status
Vulnerabilities
25 published

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map Security Vulnerabilities

CVEs by Year

1 CVE in 2014
2014
1 CVE in 2016
2016
3 CVEs in 2019
2019
1 CVE in 2020
2020
2 CVEs in 2021
2021
2 CVEs in 2023
2023
7 CVEs in 2024
2024
4 CVEs in 2025
2025
4 CVEs in 2026
2026
Patched Has unpatched

Severity Breakdown

Critical
1
High
1
Medium
23

25 total CVEs

CVE-2026-12238medium · 5.3Missing Authorization

WP Go Maps <= 10.1.01 - Unauthenticated Arbitrary Record Creation

Jun 19, 2026 Patched in 10.1.02 (1d)
CVE-2026-8385medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback

Jun 5, 2026 Patched in 10.0.10 (1d)
CVE-2026-4268medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Go Maps (formerly WP Google Maps) <= 10.0.05 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via admin_post_wpgmza_save_settings

Mar 17, 2026 Patched in 10.0.06 (1d)
CVE-2026-0593medium · 5.3Missing Authorization

WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Missing Authorization to Authenticated (Subscriber+) Map Engine Setting Modification

Jan 24, 2026 Patched in 10.0.05 (1d)
CVE-2025-11307high · 7.2Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Google Maps <= 9.0.47 - Unauthenticated Stored Cross-Site Scripting

Oct 21, 2025 Patched in 9.0.48 (28d)
CVE-2025-11703medium · 5.3Acceptance of Extraneous Untrusted Data With Trusted Data

WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning

Oct 17, 2025 Patched in 9.0.49 (1d)
CVE-2025-11166medium · 5.4Cross-Site Request Forgery (CSRF)

WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update

Oct 8, 2025 Patched in 9.0.47 (1d)
CVE-2025-24742medium · 4.3Cross-Site Request Forgery (CSRF)

WP Go Maps <= 9.0.40 - Cross-Site Request Forgery

Jan 24, 2025 Patched in 9.0.41 (5d)
CVE-2024-5994medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Go Maps (formerly WP Google Maps) <= 9.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jun 13, 2024 Patched in 9.0.39 (1d)
CVE-2024-3557medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Go Maps (formerly WP Google Maps) <= 9.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

May 23, 2024 Patched in 9.0.37 (8d)
CVE-2024-29931medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Google Maps <= 9.0.29 - Reflected Cross-Site Scripting

Mar 25, 2024 Patched in 9.0.30 (8d)
CVE-2023-6777medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

WP Go Maps (formerly WP Google Maps) <= 9.0.34 - Information Exposure to Potential Denial of Service

Mar 18, 2024 Patched in 9.0.35 (134d)
CVE-2023-4839medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting

Mar 12, 2024 Patched in 9.0.33 (1d)
CVE-2024-1582medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Mar 12, 2024 Patched in 9.0.33 (1d)
CVE-2023-6697medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting

Jan 23, 2024 Patched in 9.0.29 (189d)
CVE-2023-6627medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Google Maps <= 9.0.27 - Unauthenticated Stored Cross-Site Scripting via REST API

Dec 18, 2023 Patched in 9.0.28 (36d)
CVE-2022-47595medium · 4.9Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

WP Go Maps <= 9.0.15 - Authenticated (Admin+) Directory Traversal

Jan 20, 2023 Patched in 9.0.16 (368d)
CVE-2021-36870medium · 5.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Google Maps <= 8.1.12 - Authenticated Stored Cross-Site Scripting

Sep 8, 2021 Patched in 8.1.13 (866d)
CVE-2021-24383medium · 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Google Maps <= 8.1.11 - Authenticated Stored Cross-Site Scripting

Jun 7, 2021 Patched in 8.1.12 (960d)
CVE-2019-10692critical · 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

WP Go Maps (formerly WP Google Maps) <= 7.11.17 - SQL Injection

Sep 9, 2020 Patched in 7.11.18 (1231d)
CVE-2019-14792medium · 6.1Cross-Site Request Forgery (CSRF)

WP Google Maps <= 7.11.34 - Cross-Site Request Forgery to Cross-Site Scripting

Jul 8, 2019 Patched in 7.11.35 (1660d)
WF-f10f6b12-5bf0-475a-ad9e-084ce5801b84-wp-google-mapsmedium · 4.3Cross-Site Request Forgery (CSRF)

WP Google Maps <= 7.11.27 - Cross-Site Request Forgery

Jun 3, 2019 Patched in 7.11.28 (1695d)
CVE-2019-9912medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Google Maps < 7.10.43 - Reflected Cross-Site Scripting

Feb 5, 2019 Patched in 7.10.43 (1813d)
WF-a739b805-e631-461e-802f-196e4117d403-wp-google-mapsmedium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Google Maps <= 6.3.14 - Stored Cross-Site Scripting

Nov 10, 2016 Patched in 6.3.15 (2630d)
CVE-2014-7182medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Google Maps <= 6.0.26 - Reflected Cross-Site Scripting

Oct 15, 2014 Patched in 6.0.27 (3387d)
Version History

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map Release Timeline

v10.1.04Current
v10.1.03
v10.1.02
v10.1.011 CVE
CVE-2026-12238
v10.1.001 CVE
CVE-2026-12238
v10.0.101 CVE
CVE-2026-12238
v10.0.092 CVEs
CVE-2026-12238 CVE-2026-8385
v10.0.082 CVEs
CVE-2026-12238 CVE-2026-8385
v10.0.072 CVEs
CVE-2026-12238 CVE-2026-8385
v10.0.062 CVEs
CVE-2026-12238 CVE-2026-8385
v10.0.053 CVEs21 files changed
CVE-2026-4268 CVE-2026-12238 CVE-2026-8385
v10.0.044 CVEs37 files changed
CVE-2026-0593 CVE-2026-4268 CVE-2026-12238 +1 more
v10.0.034 CVEs16 files changed
CVE-2026-0593 CVE-2026-4268 CVE-2026-12238 +1 more
v10.0.024 CVEs21 files changed
CVE-2026-0593 CVE-2026-4268 CVE-2026-12238 +1 more
v10.0.014 CVEs3 files changed
CVE-2026-0593 CVE-2026-4268 CVE-2026-12238 +1 more
v10.0.004 CVEs
CVE-2026-0593 CVE-2026-4268 CVE-2026-12238 +1 more
v9.0.494 CVEs9 files changed
CVE-2026-0593 CVE-2026-4268 CVE-2026-12238 +1 more
v9.0.485 CVEs5 files changed
CVE-2025-11703 CVE-2026-0593 CVE-2026-4268 +2 more
v9.0.476 CVEs4 files changed
CVE-2025-11703 CVE-2026-0593 CVE-2025-11307 +3 more
v9.0.467 CVEs33 files changed
CVE-2025-11703 CVE-2026-0593 CVE-2025-11166 +4 more
Code Analysis
Analyzed Mar 16, 2026

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map Code Analysis

Dangerous Functions
1
Raw SQL Queries
50
141 prepared
Unescaped Output
185
427 escaped
Nonce Checks
21
Capability Checks
3
File Operations
34
External Requests
2
Bundled Libraries
1

Dangerous Functions Found

unserialize$temp->other_settings = unserialize($res->other_settings);legacy-core.php:753

Bundled Libraries

DataTables

SQL Query Safety

74% prepared191 total queries

Output Escaping

70% escaped612 total outputs
Data Flows · Security
23 unsanitized

Data Flow Analysis

25 flows23 with unsanitized paths
__construct (includes\class.settings-page.php:6)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
16 unprotected

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map Attack Surface

Entry Points27
Unprotected16

AJAX Handlers 25

authwp_ajax_wpgmza_dismiss_persistent_noticeincludes\class.admin-notices.php:94
authwp_ajax_wpgmza_persisten_notice_quick_actionincludes\class.admin-notices.php:95
authwp_ajax_wpgmza_installer_page_save_optionsincludes\class.installer-page.php:288
authwp_ajax_wpgmza_installer_page_skipincludes\class.installer-page.php:289
authwp_ajax_wpgmza_installer_page_temp_api_keyincludes\class.installer-page.php:290
authwp_ajax_wpgmza_installer_page_auto_onboarding_procedureincludes\class.installer-page.php:291
authwp_ajax_wpgmza_maps_engine_dialog_set_engineincludes\class.maps-engine-dialog.php:187
authwp_ajax_wpgmza_hide_chatincludes\class.page.php:124
authwp_ajax_wpgmza_report_rest_api_blockedincludes\class.rest-api.php:41
noprivwp_ajax_wpgmza_report_rest_api_blockedincludes\class.rest-api.php:42
authwp_ajax_wpgmza_rest_api_requestincludes\class.rest-api.php:45
noprivwp_ajax_wpgmza_rest_api_requestincludes\class.rest-api.php:46
authwp_ajax_wpgmza_maps_settings_danger_zone_delete_dataincludes\class.settings-page.php:151
authwp_ajax_add_markerincludes\compat\class.pro-below-8.1-compatibility.php:2459
authwp_ajax_delete_markerincludes\compat\class.pro-below-8.1-compatibility.php:2460
authwp_ajax_edit_markerincludes\compat\class.pro-below-8.1-compatibility.php:2461
authwp_ajax_approve_markerincludes\compat\class.pro-below-8.1-compatibility.php:2462
authwp_ajax_delete_markerincludes\compat\class.pro-below-8.1-compatibility.php:2463
authwp_ajax_delete_polyincludes\compat\class.pro-below-8.1-compatibility.php:2464
authwp_ajax_delete_polylineincludes\compat\class.pro-below-8.1-compatibility.php:2465
authwp_ajax_delete_datasetincludes\compat\class.pro-below-8.1-compatibility.php:2466
authwp_ajax_delete_circleincludes\compat\class.pro-below-8.1-compatibility.php:2467
authwp_ajax_delete_rectangleincludes\compat\class.pro-below-8.1-compatibility.php:2468
authwp_ajax_wpgmza_tour_progress_updateincludes\map-edit-page\class.map-editor-tour.php:175
authwp_ajax_wpgmza_clear_nominatim_cacheincludes\open-layers\class.nominatim-geocode-cache.php:253

Shortcodes 2

[wpgmza] includes\class.shortcodes.php:560
[wpgmza] includes\class.shortcodes.php:562
WordPress Hooks 108
actionwidgets_initbase\classes\widget_module.class.php:130
actionblock_categories_allincludes\3rd-party-integration\class.gutenberg-extended.php:23
actionenqueue_block_assetsincludes\3rd-party-integration\class.gutenberg-extended.php:24
actioninitincludes\3rd-party-integration\class.gutenberg-extended.php:25
actionenqueue_block_assetsincludes\3rd-party-integration\class.gutenberg.php:22
actioninitincludes\3rd-party-integration\class.gutenberg.php:23
filterwpgmza-get-core-script-dependenciesincludes\3rd-party-integration\class.gutenberg.php:41
filterwpmdb_compatibility_plugin_whitelistincludes\3rd-party-integration\class.wp-migrate-db-integration.php:20
filterwpmdb_process_column_as_binaryincludes\3rd-party-integration\class.wp-migrate-db-integration.php:21
actionwpgmza_dynamic_translations_registerincludes\3rd-party-integration\class.wpml-dynamic-translations.php:14
actionwpgmza_dynamic_translations_deregisterincludes\3rd-party-integration\class.wpml-dynamic-translations.php:15
filterwpgmza_dynamic_translations_fetchincludes\3rd-party-integration\class.wpml-dynamic-translations.php:16
filterwpgmza_dynamic_translations_providersincludes\3rd-party-integration\class.wpml-dynamic-translations.php:17
actionadmin_menuincludes\class.admin-ui.php:9
actionadmin_enqueue_scriptsincludes\class.admin-ui.php:10
actionadmin_initincludes\class.admin-ui.php:12
actionwpgmza_admin_ui_render_footer_afterincludes\class.admin-ui.php:14
filterwp_refresh_noncesincludes\class.admin-ui.php:25
actionadmin_noticesincludes\class.auto-loader.php:253
actioninitincludes\class.dynamic-translations.php:11
actionwpgmza_crud_createincludes\class.dynamic-translations.php:28
actionwpgmza_crud_updateincludes\class.dynamic-translations.php:29
actionwpgmza_crud_trashincludes\class.dynamic-translations.php:30
filterwpgmza_crud_serializeincludes\class.dynamic-translations.php:32
actionwpgmza_map_save_before_redirectincludes\class.dynamic-translations.php:35
filterwpgmza_map_data_settings_objectincludes\class.dynamic-translations.php:36
actionwpgmza_global_settings_before_redirectincludes\class.dynamic-translations.php:39
filterwpgmza_plugin_get_localized_data_settingsincludes\class.dynamic-translations.php:40
filterwpgmza_gdpr_optionsincludes\class.dynamic-translations.php:42
filterwpgmza_plugin_get_default_settingsincludes\class.gdpr-compliance.php:23
filterpre_update_option_WPGMZA_OTHER_SETTINGSincludes\class.global-settings.php:54
actionadmin_noticesincludes\class.google-maps-api-loader.php:90
filterscript_loader_tagincludes\class.google-maps-api-loader.php:208
filterscript_loader_tagincludes\class.google-maps-api-loader.php:210
actionwpgmza_installer_page_create_instanceincludes\class.installer-page.php:284
actionwpgmza_global_settings_before_redirectincludes\class.installer-page.php:293
filterwpgmza_internal_engine_template_pathincludes\class.internal-engine.php:43
actionadmin_noticesincludes\class.map.php:316
filterwpgmza_create_marker_instanceincludes\class.marker.php:195
filterload_textdomain_mofileincludes\class.plugin.php:104
actionafter_setup_themeincludes\class.plugin.php:107
actioninitincludes\class.plugin.php:145
actionactivated_pluginincludes\class.plugin.php:146
actionadmin_noticesincludes\class.plugin.php:176
actionadmin_noticesincludes\class.plugin.php:185
actionadmin_noticesincludes\class.plugin.php:194
actionadmin_initincludes\class.plugin.php:201
filterqueryincludes\class.plugin.php:213
actionsend_headersincludes\class.plugin.php:218
filterrocket_defer_inline_exclusionsincludes\class.plugin.php:230
actionadmin_noticesincludes\class.plugin.php:1310
actionplugins_loadedincludes\class.plugin.php:1340
actionadmin_initincludes\class.preview-mode.php:17
actionrest_api_initincludes\class.rest-api.php:31
actionparse_requestincludes\class.rest-api.php:33
actioninitincludes\class.rest-api.php:34
filterwp_rest_cache/allowed_endpointsincludes\class.rest-api.php:37
filterwp_rest_cache/determine_object_typeincludes\class.rest-api.php:38
filterwpgmza-get-library-dependenciesincludes\class.script-loader.php:49
filterwpgmza-get-scripts-argumentsincludes\class.script-loader.php:51
actionadmin_noticesincludes\class.script-loader.php:425
actionadmin_post_wpgmza_save_settingsincludes\class.settings-page.php:145
filterautoptimize_filter_css_noptimizeincludes\class.shortcodes.php:261
actionadmin_headincludes\class.shortcodes.php:557
actioninitincludes\class.upgrader.php:22
actioninitincludes\class.upgrader.php:34
actioninitincludes\class.upgrader.php:38
actioninitincludes\class.upgrader.php:42
actioninitincludes\class.upgrader.php:46
actioninitincludes\class.upgrader.php:50
actioninitincludes\class.upgrader.php:54
actionadmin_headincludes\compat\backwards_compat_v6.php:10
actionwpgooglemaps_hook_user_js_after_coreincludes\compat\backwards_compat_v6.php:29
actionwpgmza_check_map_editor_backwards_compatincludes\compat\backwards_compat_v6.php:47
actionwpgmza_global_settings_page_createdincludes\compat\class.pro-10-compatibility.php:13
actionwpgmza_map_edit_page_createdincludes\compat\class.pro-10-compatibility.php:14
actionwpgmza_installer_page_createdincludes\compat\class.pro-10-compatibility.php:15
actionadmin_headincludes\compat\class.pro-7-compatibility.php:9
actionadmin_noticesincludes\compat\class.pro-below-8.1-compatibility.php:1953
actionadmin_post_wpgmza_settings_page_postincludes\compat\class.pro-below-8.1-compatibility.php:2332
actionadmin_headincludes\compat\class.pro-below-8.1-compatibility.php:2471
actionadmin_noticesincludes\compat\class.pro-below-8.1-compatibility.php:2475
actionadmin_headincludes\compat\class.pro-below-8.1-compatibility.php:2489
filterscript_loader_tagincludes\google-maps\class.google-maps-loader.php:162
actionadmin_headincludes\map-edit-page\class.map-edit-page.php:478
actionadmin_post_wpgmza_save_mapincludes\map-edit-page\class.map-edit-page.php:693
actionadmin_post_wpgmza_save_styling_settingsincludes\styling\class.styling-page.php:52
actionplugins_loadedlegacy-core.php:17
actionadmin_noticeslegacy-core.php:46
filterwidget_textlegacy-core.php:134
filternetwork_admin_plugin_action_links_wp-google-maps/wpGoogleMaps.phplegacy-core.php:187
filterplugin_action_links_wp-google-maps/wpGoogleMaps.phplegacy-core.php:188
actionadmin_noticeslegacy-core.php:220
actionwpgooglemaps_basic_hook_user_js_after_corelegacy-core.php:331
filterautoptimize_filter_css_noptimizelegacy-core.php:879
actionplugins_loadedlegacy-core.php:1326
actionadmin_enqueue_styleslegacy-core.php:1668
actionadmin_enqueue_scriptslegacy-core.php:1669
actionadmin_headlegacy-core.php:1670
actioninitlegacy-core.php:1671
actionadmin_footerlegacy-core.php:1672
actionadmin_print_styleslegacy-core.php:1673
actionplugins_loadedlegacy-core.php:1780
actionadmin_noticeswpGoogleMaps.php:236
actionadmin_noticeswpGoogleMaps.php:298
actionadmin_noticeswpGoogleMaps.php:304
actionadmin_noticeswpGoogleMaps.php:310
actionadmin_noticeswpGoogleMaps.php:407
Maintenance & Trust

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJul 10, 2026
PHP min version7.0
Downloads27.9M

Community Trust

Rating96/100
Number of ratings3,024
Active installs300K
Alternatives

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map Alternatives

WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters

WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters

wp-google-map-plugin

A
88

WordPress map plugin for Google Maps, OpenStreetMap & Mapbox with store locator, filterable listings & custom markers.

60K 25 CVEs
WP Store Locator

WP Store Locator

wp-store-locator

A
96

An easy to use location management system that enables users to search for nearby physical stores.

50K 2 CVEs
Store Locator WordPress

Store Locator WordPress

agile-store-locator

A
89

Agile Store Locator is a premium store finder plugin designed to offer you immediate access to all the best stores in your local area.

10K 9 CVEs
Maps Plugin using Google Maps for WordPress – WP Google Map

Maps Plugin using Google Maps for WordPress – WP Google Map

gmap-embed

A
97

Google Map plugin for WordPress is very Simple, light-weight and Easy to use Google Custom Map with markers in Posts, Pages, Sidebar as shortcode.

10K 6 CVEs
MapSVG – Vector maps, Image maps, Google Maps

MapSVG – Vector maps, Image maps, Google Maps

mapsvg-lite-interactive-vector-maps

A
91

Create interactive vector maps, floor plans, and image maps. Support for Google Maps integration, custom markers, tooltips, and popups.

1K 7 CVEs
Developer Profile

WP Go Maps – Google Map, OpenStreetMap, Leaflet Map Developer Profile

WPGMaps

2 plugins · 303K total installs

74
trust score
Avg Security Score
93/100
Avg Patch Time
601 days
View full developer profile
Detection Fingerprints

How We Detect WP Go Maps – Google Map, OpenStreetMap, Leaflet Map

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-google-maps/wp-google-maps.js/wp-content/plugins/wp-google-maps/wp-google-maps.css/wp-content/plugins/wp-google-maps/css/wpgmaps.css/wp-content/plugins/wp-google-maps/css/wpgmaps-legacy.css/wp-content/plugins/wp-google-maps/css/wpgmaps-editor.css/wp-content/plugins/wp-google-maps/js/wpgmaps.js/wp-content/plugins/wp-google-maps/js/wpgmaps-editor.js/wp-content/plugins/wp-google-maps/js/wpgmaps-frontend.js+9 more
Script Paths
/wp-content/plugins/wp-google-maps/wp-google-maps.js/wp-content/plugins/wp-google-maps/js/wpgmaps.js/wp-content/plugins/wp-google-maps/js/wpgmaps-frontend.js/wp-content/plugins/wp-google-maps/js/wpgmaps-shortcode.js
Version Parameters
wp-google-maps/wp-google-maps.js?ver=wp-google-maps/css/wpgmaps.css?ver=wp-google-maps/js/wpgmaps.js?ver=wp-google-maps/js/wpgmaps-frontend.js?ver=wp-google-maps/js/wpgmaps-shortcode.js?ver=

HTML / DOM Fingerprints

CSS Classes
wpgmaps_containerwpgmaps_mapwpgmaps_info_windowwpgmaps_markerwpgmaps_directions_panelwpgmaps_directions_formwpgmaps_store_locator_resultswpgmaps_store_locator_map+1 more
HTML Comments
<!-- WP Go Maps - Start Map --><!-- WP Go Maps - End Map --><!-- WP Go Maps - Map ID:<!-- WP Go Maps - Marker ID:+2 more
Data Attributes
data-wpgmaps-map-iddata-wpgmaps-marker-iddata-wpgmaps-shortcode-optionsdata-wpgmaps-latdata-wpgmaps-lng
JS Globals
wpgmapswpgmaps_objectswpgmaps_marker_datawpgmaps_settingswpgmaps_shortcode_varsWPGMaps
REST Endpoints
/wp-json/wpgmaps/v1/maps//wp-json/wpgmaps/v1/markers//wp-json/wpgmaps/v1/shapes/
Shortcode Output
[wpgmza id="[wpgmaps id="[best-google-maps id="[cp-maps id="
FAQ

Frequently Asked Questions about WP Go Maps – Google Map, OpenStreetMap, Leaflet Map