Avoid: vulnerability published 1 Sep 2026 still has no fix after 14 days.
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 20 |
| Support | No data |
| Reputation | 70 |
Quick answers
- Is MapGeo still maintained?
- Yes. Last release 7 Aug 2026, 10 releases in the last 24 months. 7 Aug 2026 · wordpress.org
- Who owns MapGeo, and has it changed hands?
- No change recorded. Main committer interactivegeomaps since Mar 2024. 4 Nov 2026 · SVN log
- Was MapGeo removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is MapGeo safe?
- No. 1 known vulnerability has no fix in the current version. 1 Sep 2026 · Wordfence Intelligence
- Is the latest MapGeo update safe to install?
- No ownership change before 1.6.30. No one-star spike after it. 7 Aug 2026 · Release history
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 1 Sep 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.15 Sep 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 27 Oct 2019 to 27 Oct 2019, 1 commits |
|---|---|
| carlosmoreirapt | 28 Oct 2019 to 29 Jan 2024, 64 commits |
| pcarvalho | 5 Jul 2023 to 28 Nov 2023, 17 commits |
| interactivegeomaps | 4 Mar 2024 to 7 Aug 2026, 32 commits |
4 committers recorded. No ownership change since 2019.
Maintenance
- Last release
- 3 months ago
- Releases, 24 months
- 10
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 4 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 3 |
| Q4 2024 | 2 |
| Q1 2025 | 3 |
| Q2 2025 | 2 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 2 |
| Q2 2026 | 0 |
| Q3 2026 | 2 |
| Q4 2026 | 0 |
Last release 7 Aug 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Reputation
Last 90 days: 3.5 (2 reviews). Lifetime: 4.4.
| Q4 2023 | 5.0 |
|---|---|
| Q1 2024 | 5.0 |
| Q2 2024 | 2.0 |
| Q3 2024 | 1.5 |
| Q4 2024 | 4.3 |
| Q1 2025 | 3.5 |
| Q2 2025 | 4.5 |
| Q3 2025 | 3.0 |
| Q2 2026 | 1.0 |
| Q4 2026 | 3.5 |
Average rating fell from 5.0 to 3.5 between Q4 2023 and Q4 2026.
| 5 star | 53 |
|---|---|
| 4 star | 1 |
| 3 star | 1 |
| 2 star | 6 |
| 1 star | 4 |
- No longer usable · 2 stars · 4 Oct 2026
- Unresponsive support for Free or Premium · 1 star · 28 May 2026
- Useful plugin, bugs quickly resolved… · 1 star · 25 Aug 2025
Security record
4 vulnerabilities in 24 months (8 on record), 1 with no fix in the current version.
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 1 Sep 2026 | MapGeo - Interactive Geo Maps <= 1.6.30 - Reflected Cross-Site Scripting | 6.1 | <= 1.6.30 | No fix | n/a |
Show 7 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 13 May 2026 | MapGeo - Interactive Geo Maps <= 1.6.27 - Reflected Cross-Site Scripting via 'map' Parameter | 6.1 | <= 1.6.27 | 1.6.28 | Patched before disclosure |
| 30 Apr 2026 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | 6.1 | <= 1.6.22 | 1.6.23 | Patched before disclosure |
| 9 Apr 2025 | Interactive Geo Maps <= 1.6.24 - Reflected Cross-Site Scripting | 6.1 | <= 1.6.24 | 1.6.25 | 12 |
| 18 Jul 2023 | Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get | 6.1 | 1.0.5 to 1.5.11 | 1.6.1 | Patched before disclosure |
| 7 Feb 2023 | Interactive Geo Maps <= 1.5.9 - Authenticated (Editor+) Stored Cross-Site Scripting | 6.4 | <= 1.5.9 | 1.5.11 | 1 |
| 30 Jan 2023 | Interactive Geo Maps <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | 6.4 | <= 1.5.8 | 1.5.9 | 1 |
| 4 Mar 2022 | Freemius SDK <= 2.4.2 - Missing Authorization Checks | 6.3 | < 1.5.4 | 1.5.4 | Patched before disclosure |
Changelog mentions of security fixes: 1.6.29 (security, escaping).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
0% of 3 support threads resolved in the last 2 months.
Momentum
30,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 344 |
|---|---|
| 11 May 2026 | 2,138 |
| 18 May 2026 | 2,185 |
| 25 May 2026 | 1,102 |
| 1 Jun 2026 | 949 |
| 8 Jun 2026 | 1,004 |
| 15 Jun 2026 | 885 |
| 22 Jun 2026 | 788 |
| 29 Jun 2026 | 776 |
| 6 Jul 2026 | 848 |
| 13 Jul 2026 | 856 |
| 20 Jul 2026 | 871 |
| 27 Jul 2026 | 835 |
| 3 Aug 2026 | 11,495 |
| 10 Aug 2026 | 6,132 |
| 17 Aug 2026 | 2,598 |
| 24 Aug 2026 | 2,178 |
| 31 Aug 2026 | 1,927 |
| 7 Sep 2026 | 1,650 |
| 14 Sep 2026 | 1,408 |
| 21 Sep 2026 | 1,364 |
| 28 Sep 2026 | 1,307 |
| 5 Oct 2026 | 1,208 |
| 12 Oct 2026 | 1,291 |
| 19 Oct 2026 | 1,589 |
| 26 Oct 2026 | 1,407 |
| 2 Nov 2026 | 278 |
Weekly downloads over the last 4 weeks are 38% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 1.6.30 |
|---|---|
| Author | MapGeo |
| Added | 28 Oct 2019 |
| Last updated | 7 Aug 2026 |
| Active installs | 30,000+ |
| Requires WordPress | 5.0 |
| Tested up to | 7.0.8 |
| Requires PHP | 7.4 |
| Category | Content Management > Document Management & Downloads |
| Tags | map, us map, world map, travel map, interactive map |
Questions
Is MapGeo still maintained?
Yes. Last release 7 Aug 2026, 10 releases in the last 24 months.
Who owns MapGeo, and has it changed hands?
No change recorded. Main committer interactivegeomaps since Mar 2024.
Was MapGeo removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is MapGeo safe?
No. 1 known vulnerability has no fix in the current version.
Is the latest MapGeo update safe to install?
No ownership change before 1.6.30. No one-star spike after it.