Skip to content
PluginCanary

Geo Mashup

by Dylan Kuhn · 1,000+ active installs · Checked 3 Nov 2026
Healthy7 Warnings

Healthy: vulnerability published 26 Oct 2026, fixed in 1.13.23.

81/ 100 Canary Score
Sub-scores for Geo Mashup
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 26 Oct 2026, fixed in 1.13.23. Update to version 1.13.23 or later.26 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 26 Oct 2026, fixed in 1.13.23. Update to version 1.13.23 or later.26 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 1.13.23. Update to version 1.13.23 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 29 Sep 2026, fixed in 1.13.22. Update to version 1.13.22 or later.29 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 16 Sep 2026, fixed in 1.13.22. Update to version 1.13.22 or later.16 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 7 Aug 2026, fixed in 1.13.19. Update to version 1.13.19 or later.7 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 7 Aug 2026, fixed in 1.13.19. Update to version 1.13.19 or later.7 Aug 2026Evidence
  • InfoSEC-318 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
cyberhobo15 Nov 2005 to 20 Sep 2026, 359 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
44 days ago
Releases, 24 months
9
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for Geo Mashup
Q1 20240
Q2 20240
Q3 20242
Q4 20241
Q1 20251
Q2 20251
Q3 20250
Q4 20250
Q1 20261
Q2 20263
Q3 20262
Q4 20260

Last release 20 Sep 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
26 Oct 2026Geo Mashup <= 1.13.22 - Missing Authorization4.3<= 1.13.221.13.230
26 Oct 2026Geo Mashup <= 1.13.22 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 1.13.221.13.230
19 Oct 2026Geo Mashup <= 1.13.22 - Reflected Cross-Site Scripting6.1<= 1.13.221.13.230
29 Sep 2026Geo Mashup <= 1.13.21 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.13.211.13.220
16 Sep 2026Geo Mashup <= 1.13.21 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.13.211.13.220
7 Aug 2026Geo Mashup <= 1.13.18 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.13.181.13.190
7 Aug 2026Geo Mashup <= 1.13.18 - Unauthenticated Local File Inclusion8.1<= 1.13.181.13.190
3 Jun 2026Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection6.5<= 1.13.191.13.200
27 May 2026Geo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' Parameter5.3<= 1.13.191.13.200
26 May 2026Geo Mashup <= 1.13.19 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.13.191.13.200
26 May 2026Geo Mashup <= 1.13.18 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.13.181.13.190
1 May 2026Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter6.5<= 1.13.191.13.200
1 May 2026Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' Parameter7.5<= 1.13.181.13.190
1 May 2026Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter7.5<= 1.13.181.13.190
1 May 2026Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter7.5<= 1.13.181.13.190
30 Apr 2026Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter6.1<= 1.13.151.13.160
24 Feb 2026Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter7.5<= 1.13.171.13.180
25 Jul 2025Geo Mashup <= 1.13.16 - Unauthenticated Local File Inclusion8.1<= 1.13.161.13.170
30 Sep 2024Geo Mashup <= 1.13.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via geo_mashup_visible_posts_list Shortcode6.4<= 1.13.131.13.140
16 Sep 2024Geo Mashup <= 1.13.12 - Authenticated (Contributor+) Stored Cross-Site Scripting6.5<= 1.13.121.13.130
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.11.9.1 to 1.13.111.13.120
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 1.13.61.13.63
16 Jul 2018Geo Mashup - < 1.10.4 - Cross-Site Scripting6.4< 1.10.41.10.40
27 Jan 2015Geo Mashup < 1.8.3 - Cross-Site Scripting6.1< 1.8.31.8.30

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.7 from 33 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star30
4 star0
3 star0
2 star1
1 star2

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Geo Mashup
4 May 2026164
11 May 2026160
18 May 2026140
25 May 2026155
1 Jun 2026169
8 Jun 2026231
15 Jun 202674
22 Jun 202673
29 Jun 202677
6 Jul 202669
13 Jul 202697
20 Jul 2026130
27 Jul 202691
3 Aug 2026110
10 Aug 2026108
17 Aug 2026136
24 Aug 2026132
31 Aug 2026132
7 Sep 202693
14 Sep 20261,010
21 Sep 20261,033
28 Sep 2026269
5 Oct 2026222
12 Oct 2026214
19 Oct 2026354
26 Oct 2026332
2 Nov 202641

Weekly downloads over the last 4 weeks are 9% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

API KEY for Google MapsScore 91 · 30,000+Maps Widget for Google MapsScore 91 · 20,000+Map BlockScore 91 · 6,000+HTML5 MapsScore 91 · 4,000+exovia GDPR Google MapsScore 91 · 4,000+

Facts

Version1.13.23
AuthorDylan Kuhn
Added15 Nov 2005
Last updated20 Sep 2026
Active installs1,000+
Requires WordPress3.7
Tested up to7.1.4
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagsgeo, maps, geocms, mapping, Google Maps

Other plugins by this author: Tally Graph

Questions

Is Geo Mashup still maintained?

Geo Mashup was last updated on 20 Sep 2026. Its Canary status is Healthy.

Is Geo Mashup safe?

Geo Mashup has no open unpatched vulnerabilities on record. 18 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Geo Mashup?

The wordpress.org author is Dylan Kuhn. Recent committers: cyberhobo, matt. We have recorded no ownership change.

What can I use instead of Geo Mashup?

Plugins in the same category with a higher Canary Score: API KEY for Google Maps, Maps Widget for Google Maps, Map Block, HTML5 Maps, exovia GDPR Google Maps.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue