Skip to content
PluginCanary

MapSVG

MapSVG - Vector maps, Image maps, Google Maps
by RomanCode · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 17 Oct 2026, 78 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for MapSVG
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is MapSVG still maintained?
Yes. Last release 17 Oct 2026, 78 releases in the last 24 months. 17 Oct 2026 · wordpress.org
Who owns MapSVG, and has it changed hands?
No change recorded. Main committer oyatek since Mar 2016. 3 Nov 2026 · SVN log
Was MapSVG removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is MapSVG safe?
19 known vulnerabilities, all fixed (latest in 8.16.2). Not on the exploited list. 17 Oct 2026 · Wordfence Intelligence
Is the latest MapSVG update safe to install?
No ownership change before 8.16.3. No one-star spike after it. 17 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
oyatek14 Mar 2016 to 17 Oct 2026, 270 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
18 days ago
Releases, 24 months
78
Tested up to
7.0 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for MapSVG
Q1 20240
Q2 20240
Q3 20240
Q4 202412
Q1 20253
Q2 202515
Q3 202515
Q4 202515
Q1 20266
Q2 20264
Q3 20266
Q4 20262

Last release 17 Oct 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.5.

Rating distribution
5 star26
4 star1
3 star0
2 star1
1 star3

Security record

18 vulnerabilities in 24 months (19 on record), all patched (latest fixed in 8.16.2).

Show 19 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
17 Oct 2026MapSVG - Vector maps, Image maps, Google Maps <= 8.16.1 - Authenticated (Contributor+) Arbitrary File Upload8.8<= 8.16.18.16.2Patched before disclosure
17 Oct 2026MapSVG - Vector maps, Image maps, Google Maps <= 8.16.1 - Authenticated (Contributor+) Arbitrary File Deletion8.1<= 8.16.18.16.2Patched before disclosure
16 Oct 2026MapSVG - Vector maps, Image maps, Google Maps <= 8.16.1 - Authenticated (Contributor+) SQL Injection6.5<= 8.16.18.16.2Patched before disclosure
16 Oct 2026MapSVG - Vector maps, Image maps, Google Maps <= 8.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 8.16.18.16.2Patched before disclosure
16 Oct 2026MapSVG - Vector maps, Image maps, Google Maps <= 8.16.1 - Unauthenticated Information Exposure5.3<= 8.16.18.16.2Patched before disclosure
31 Aug 2026MapSVG - Vector maps, Image maps, Google Maps <= 8.15.0 - Unauthenticated Server-Side Request Forgery7.2<= 8.15.08.16.04
23 Jul 2026MapSVG Lite <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 8.14.08.14.1Patched before disclosure
23 Jul 2026MapSVG - Vector maps, Image maps, Google Maps <= 8.14.0 - Unauthenticated SQL Injection7.5<= 8.14.08.14.1Patched before disclosure
22 Jul 2026MapSVG - Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 8.14.08.14.1Patched before disclosure
22 Jul 2026MapSVG - Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Contributor+) SQL Injection6.5<= 8.14.08.14.1Patched before disclosure
22 Jul 2026MapSVG - Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Admin+) Arbitrary File Upload7.2<= 8.14.08.14.1Patched before disclosure
20 Jul 2026MapSVG <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint7.2<= 8.14.08.14.1Patched before disclosure
24 Dec 2025MapSVG <= 8.7.3 - Authenticated (Contributor+) Arbitrary File Upload8.8<= 8.7.38.7.4Patched before disclosure
6 Oct 2025MapSVG <= 8.7.23 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 8.7.228.7.2346
16 May 2025MapSVG Lite <= 8.6.9 - Unauthenticated Arbitrary Shortcode Execution6.5<= 8.6.98.6.1026
15 Apr 2025MapSVG Lite <= 8.6.4 - Authenticated (Contributor+) Arbitrary File Upload8.8<= 8.6.48.6.543
9 Apr 2025MapSVG Lite <= 8.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 8.6.68.6.762
9 Apr 2025MapSVG Lite <= 8.6.4 - Missing Authorization4.3<= 8.6.48.6.549
8 Jan 2019MapSVG Lite < 3.3.0 - Cross-Site Request Forgery6.1< 3.3.03.3.0n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for MapSVG
4 May 2026126
11 May 2026194
18 May 20261,027
25 May 2026281
1 Jun 2026264
8 Jun 2026299
15 Jun 2026321
22 Jun 2026299
29 Jun 2026214
6 Jul 2026236
13 Jul 20261,754
20 Jul 2026756
27 Jul 2026395
3 Aug 2026310
10 Aug 2026279
17 Aug 2026262
24 Aug 2026309
31 Aug 2026955
7 Sep 20261,568
14 Sep 2026506
21 Sep 20261,682
28 Sep 20264,529
5 Oct 20261,479
12 Oct 20262,195
19 Oct 20261,806
26 Oct 20261,057
2 Nov 2026139

Weekly downloads over the last 4 weeks are 51% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

API KEY for Google MapsScore 100 · 30,000+Maps Widget for Google MapsScore 100 · 20,000+Maps Plugin using Google Maps forScore 96 · 10,000+Leaflet MapScore 91 · 30,000+Easy Google Maps by SupsysticScore 88 · 20,000+

Facts

Version8.16.3
AuthorRomanCode
Added14 Mar 2016
Last updated17 Oct 2026
Active installs1,000+
Requires WordPress5.0
Tested up to7.0.8
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsmap, floorplan, Image Map, Google Maps, Store locator

Questions

Is MapSVG still maintained?

Yes. Last release 17 Oct 2026, 78 releases in the last 24 months.

Who owns MapSVG, and has it changed hands?

No change recorded. Main committer oyatek since Mar 2016.

Was MapSVG removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is MapSVG safe?

19 known vulnerabilities, all fixed (latest in 8.16.2). Not on the exploited list.

Is the latest MapSVG update safe to install?

No ownership change before 8.16.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue