Skip to content
PluginCanary

OSM

by MiKa · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: released 5 months ago, no open vulnerabilities.

88/ 100Healthy
Canary Score

Based on 3 of 5 areas

Sub-scores for OSM
Ownership100
Maintenance90
Security75
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 10 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is OSM still maintained?
Yes. Last release 4 Jun 2026, 11 releases in the last 24 months. 4 Jun 2026 · wordpress.org
Who owns OSM, and has it changed hands?
No change recorded. Main committer photoweblog since Apr 2009. 4 Nov 2026 · SVN log
Was OSM removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is OSM safe?
10 known vulnerabilities, all fixed (latest in 6.1.16). Not on the exploited list. 8 Apr 2026 · Wordfence Intelligence
Is the latest OSM update safe to install?
No ownership change before 6.2.6. No one-star spike after it. 4 Jun 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
photoweblog8 Apr 2009 to 4 Jun 2026, 296 commits

1 committer recorded. No ownership changes recorded since 2009.

Maintenance

Last release
5 months ago
Releases, 24 months
11
Tested up to
7.0 vs 7.1
Requires PHP
5.3 supported 8.2+
Releases per quarter
Releases per quarter for OSM
Q1 20240
Q2 20240
Q3 20248
Q4 20241
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20265
Q2 20266
Q3 20260
Q4 20260

Last release 4 Jun 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

Resolved, last 2 months
0%
Threads, last 2 months
1

Trend appears after 8 weekly snapshots.

Security record

5 vulnerabilities in 24 months (10 on record), all patched (latest fixed in 6.1.16).

Show 10 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
8 Apr 2026Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker_name' Shortcode Attribute6.4<= 6.1.156.1.16Before disclosure
27 Mar 2026Authenticated (Subscriber+) Stored Cross-Site Scripting6.4< 6.1.156.1.15Before disclosure
29 Jan 2026Missing Authorization4.3<= 6.1.126.1.13Before disclosure
31 Mar 2025Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 6.1.136.1.14308
8 Nov 2024Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 6.1.26.1.3n/a
26 Sep 2024Authenticated (Contributor+) Stored Cross-Site Scripting via osm_map and osm_map_v3 Shortcodes6.4<= 6.1.06.1.1n/a
8 Jul 2024Authenticated (Contributor+) SQL Injection9.9<= 6.0.36.0.4n/a
8 Jul 2024Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 6.0.36.0.4n/a
3 May 2023Authenticated(Contributor+) Stored Cross-Site Scripting via 'osm_map' Shortcode6.4<= 6.0.56.0.6507
30 Sep 2022Cross-Site Request Forgery8.8<= 6.06.0.1n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 4.6.

Last 90 days vs lifetime average rating for OSM
Last 90 daysNo reviews
Lifetime4.6
Average rating per quarter
Average rating per quarter for OSM
Q4 20235.0
Q3 20244.5
Q4 20245.0
Q4 20255.0
Q1 20265.0
Q2 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q2 2026.

Rating distribution
5 star117
4 star7
3 star3
2 star3
1 star7

Momentum

Active installs
10,000+
Downloads, last full week
467
Weekly downloads, last 26 complete weeks
Weekly downloads for OSM
4 May 2026213
11 May 2026763
18 May 2026860
25 May 2026649
1 Jun 20267,254
8 Jun 20261,340
15 Jun 2026934
22 Jun 2026616
29 Jun 2026663
6 Jul 2026663
13 Jul 2026520
20 Jul 2026567
27 Jul 2026471
3 Aug 2026480
10 Aug 2026415
17 Aug 2026401
24 Aug 2026404
31 Aug 2026397
7 Sep 2026343
14 Sep 2026410
21 Sep 2026412
28 Sep 2026380
5 Oct 2026407
12 Oct 2026355
19 Oct 2026764
26 Oct 2026467

Weekly downloads over the last 4 weeks are 39% below the 26-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

Leaflet MapScore 95 · 30,000+API KEY for Google MapsScore 95 · 30,000+Maps Widget for Google MapsScore 95 · 20,000+

Facts

Full name
OSM - OpenStreetMap
Version
6.2.6
Author
MiKa
Added
8 Apr 2009
Last updated
4 Jun 2026
Active installs
10,000+
Requires WordPress
5.0
Tested up to
7.0.8
Requires PHP
5.3
Category
E-commerce & Shopping
Tags
GPX, kml, osm, OpenSeaMap, openstreetmap

Questions about OSM

Is OSM still maintained?

Yes. Last release 4 Jun 2026, 11 releases in the last 24 months.

Who owns OSM, and has it changed hands?

No change recorded. Main committer photoweblog since Apr 2009.

Was OSM removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is OSM safe?

10 known vulnerabilities, all fixed (latest in 6.1.16). Not on the exploited list.

Is the latest OSM update safe to install?

No ownership change before 6.2.6. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue