Skip to content
PluginCanary

MapPress

MapPress - Google Maps, OpenStreetMap & Leaflet
by chrisvrichardson · 30,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 29 Oct 2026, 262 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for MapPress
Ownership100
Maintenance100
Security65
SupportNo data
Reputation85

How the score works

Quick answers

Is MapPress still maintained?
Yes. Last release 29 Oct 2026, 262 releases in the last 24 months. 29 Oct 2026 · wordpress.org
Who owns MapPress, and has it changed hands?
No change recorded. Main committer chrisvrichardson since Apr 2009. 4 Nov 2026 · SVN log
Was MapPress removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is MapPress safe?
18 known vulnerabilities, all fixed (latest in 2.97.15). Not on the exploited list. 30 Oct 2026 · Wordfence Intelligence
Is the latest MapPress update safe to install?
No ownership change before 2.97.15. No one-star spike after it. 29 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
chrisvrichardson1 Apr 2009 to 5 Nov 2026, 660 commits

1 committer recorded. No ownership change since 2009.

Maintenance

Last release
7 days ago
Releases, 24 months
262
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for MapPress
Q1 202418
Q2 20246
Q3 20248
Q4 20247
Q1 20255
Q2 20253
Q3 20251
Q4 20253
Q1 20269
Q2 202615
Q3 2026221
Q4 20261

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.7.

Average rating per quarter for MapPress
Q1 20245.0
Q2 20245.0
Q1 20255.0
Q1 20265.0
Q3 20265.0

Average rating stayed at 5.0 between Q1 2024 and Q3 2026.

Rating distribution
5 star126
4 star11
3 star2
2 star0
1 star8
Latest low reviews

Security record

7 vulnerabilities in 24 months (18 on record), all patched (latest fixed in 2.97.15).

Show 18 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026MapPress Maps for WordPress <= 2.97.14 - Unauthenticated Information Exposure5.3<= 2.97.142.97.15Patched before disclosure
24 Jul 2026MapPress - Google Maps, OpenStreetMap & Leaflet <= 2.97.6 - Unauthenticated Information Exposure5.3<= 2.97.62.97.7Patched before disclosure
19 Jun 2026MapPress Maps for WordPress <= 2.97.3 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.97.32.97.4Patched before disclosure
5 Jun 2026MapPress Maps for WordPress <= 2.96.6 - Unauthenticated Insecure Direct Object Reference via REST API Endpoints5.3<= 2.96.62.97.1Patched before disclosure
27 Mar 2025MapPress Maps for WordPress <= 2.94.9 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 2.94.92.94.10Patched before disclosure
13 Mar 2025MapPress Maps for WordPress <= 2.94.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.94.82.94.9Patched before disclosure
5 Nov 2024MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block6.4<= 2.94.12.94.2Patched before disclosure
24 Sep 2024MapPress Maps for WordPress <= 2.92.2 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 2.92.22.93Patched before disclosure
29 Jan 2024MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settings6.4<= 2.88.162.88.17Patched before disclosure
17 Jan 2024MapPress Maps for WordPress <= 2.88.15 - Insufficient Authorization to Information Disclosure5.3<= 2.88.152.88.16Patched before disclosure
17 Jan 2024MapPress Maps for WordPress <= 2.88.14 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.88.142.88.15Patched before disclosure
2 Jan 2024MapPress Maps for WordPress <= 2.88.13 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.88.132.88.14Patched before disclosure
11 Sep 2023MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 2.88.42.88.5Patched before disclosure
6 Apr 2023MapPress Maps for WordPress <= 2.85.4 - Authenticated (Contributor+) SQL Injection via get_maps8.8<= 2.85.42.85.5Patched before disclosure
14 Mar 2022MapPress Maps for WordPress <= 2.73.12 - Admin+ File Upload to Remote Code Execution6< 2.73.132.73.131616
17 Jan 2022MapPress Maps <= 2.73.3 - Reflected Cross-Site Scripting6.1< 2.73.42.73.41672
28 May 2020MapPress Maps <= 2.54.5 - Remote Code Execution via Improper Capability Checks in AJAX Calls8.8<= 2.54.52.54.62271
1 Apr 2020MapPress Maps for WordPress <=2.53.8 - Authenticated Map Creation/Deletion to Stored Cross-Site Scripting & Remote Code Execution6.5< 2.53.92.53.92328

Changelog mentions of security fixes: 2.97.2 (security); 2.97.4 (escaping); 2.97.5 (nonce).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

30,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for MapPress
4 May 20262,343
11 May 202613,518
18 May 20263,319
25 May 202612,361
1 Jun 20263,232
8 Jun 202624,613
15 Jun 20263,060
22 Jun 202612,198
29 Jun 20263,037
6 Jul 20262,535
13 Jul 20261,488
20 Jul 202622,245
27 Jul 20263,124
3 Aug 20262,785
10 Aug 20269,440
17 Aug 20265,977
24 Aug 202613,264
31 Aug 20262,275
7 Sep 202622,970
14 Sep 20264,013
21 Sep 20262,495
28 Sep 202619,310
5 Oct 20263,368
12 Oct 20261,596
19 Oct 20262,426
26 Oct 202613,314
2 Nov 2026931

Weekly downloads over the last 4 weeks are 42% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

API KEY for Google MapsScore 100 · 30,000+Maps Widget for Google MapsScore 100 · 20,000+Maps Plugin using Google Maps forScore 96 · 10,000+Leaflet MapScore 91 · 30,000+YaMaps for WordPress PluginScore 91 · 10,000+

Facts

Version2.97.15
Authorchrisvrichardson
Added1 Apr 2009
Last updated29 Oct 2026
Active installs30,000+
Requires WordPress6.3
Tested up to7.1.4
Requires PHP7.0
CategoryE-commerce & Shopping
Tagsmaps, mapbox, leaflet, Google Maps, openstreetmap

Questions

Is MapPress still maintained?

Yes. Last release 29 Oct 2026, 262 releases in the last 24 months.

Who owns MapPress, and has it changed hands?

No change recorded. Main committer chrisvrichardson since Apr 2009.

Was MapPress removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is MapPress safe?

18 known vulnerabilities, all fixed (latest in 2.97.15). Not on the exploited list.

Is the latest MapPress update safe to install?

No ownership change before 2.97.15. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue
Is MapPress safe and maintained? | PluginCanary