Skip to content
PluginCanary

WP Maps

WP Maps - Google Maps, OpenStreetMap, Mapbox, Store Locator with Search, Filters & Listings
by Flipper Code - WordPress Development Company · 60,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 28 Oct 2026, 30 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for WP Maps
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Quick answers

Is WP Maps still maintained?
Yes. Last release 28 Oct 2026, 30 releases in the last 24 months. 28 Oct 2026 · wordpress.org
Who owns WP Maps, and has it changed hands?
No change recorded. Main committer flippercode since Mar 2013. 4 Nov 2026 · SVN log
Was WP Maps removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WP Maps safe?
31 known vulnerabilities, all fixed (latest in 5.0.0). Not on the exploited list. 24 Sep 2026 · Wordfence Intelligence
Is the latest WP Maps update safe to install?
No ownership change before 5.0.3. No one-star spike after it. 28 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
flippercode15 Mar 2013 to 30 Oct 2026, 301 commits

1 committer recorded. No ownership change since 2013.

Maintenance

Last release
7 days ago
Releases, 24 months
30
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for WP Maps
Q1 20242
Q2 20245
Q3 20244
Q4 20242
Q1 20253
Q2 20253
Q3 20255
Q4 20256
Q1 20262
Q2 20262
Q3 20266
Q4 20262

Last release 28 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.3.

Average rating per quarter for WP Maps
Q4 20231.0
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q2 20254.3
Q3 20255.0
Q2 20262.0

Average rating rose from 1.0 to 2.0 between Q4 2023 and Q2 2026.

Rating distribution
5 star92
4 star5
3 star5
2 star4
1 star16
Latest low reviews

Security record

17 vulnerabilities in 24 months (31 on record), all patched (latest fixed in 5.0.0).

Show 31 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
24 Sep 2026WP Maps <= 4.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values Parameter6.4<= 4.9.85.0.0Patched before disclosure
24 Sep 2026WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameter7.5<= 4.9.85.0.0Patched before disclosure
17 Sep 2026WP Maps - Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters <= 4.9.9 - Authenticated (Administrator+) SQL Injection4.9<= 4.9.95.0.0Patched before disclosure
21 Aug 2026WP Maps - Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters < 4.9.8 - Missing Authorization4.3< 4.9.84.9.8Patched before disclosure
3 Aug 2026Maps <= 4.9.6 - Authenticated (Subscriber+) Denial of Service6.5<= 4.9.64.9.7Patched before disclosure
31 Jul 2026WP Maps - Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters <= 4.9.6 - Authenticated (Subscriber+) Information Exposure4.3<= 4.9.64.9.7Patched before disclosure
11 Jun 2026WP Maps - Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters < 4.9.3 - Authenticated (Subscriber+) Local File Inclusion7.5< 4.9.34.9.3Patched before disclosure
5 Jun 2026WP Maps <= 4.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting via 'location_messages' Parameter4.4<= 4.9.44.9.5Patched before disclosure
15 Apr 2026WP Maps - Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'put_wpgm' Shortcode6.4<= 4.8.74.8.8Patched before disclosure
8 Apr 2026WP Maps - Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection7.5<= 4.9.14.9.2Patched before disclosure
22 Mar 2026WP Maps - Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters <= 4.9.1 - Unauthenticated SQL Injection via 'orderby' Parameter7.5<= 4.9.14.9.2Patched before disclosure
10 Mar 2026WP Maps <= 4.9.1 - Unauthenticated SQL Injection via 'location_id' Parameter7.5<= 4.9.14.9.2Patched before disclosure
16 Feb 2026WP Maps <= 4.8.6 - Authenticated (Subscriber+) Limited Local File Inclusion8.8<= 4.8.64.8.7Patched before disclosure
2 Nov 2025Maps <= 4.8.6 - Authenticated (Administrator+) PHP Object Injection6.6<= 4.8.64.8.727
10 Apr 2025WP Maps - Display Google Maps Perfectly with Ease <= 4.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 4.7.14.7.2Patched before disclosure
10 Apr 2025WP Maps - Display Google Maps Perfectly with Ease <= 4.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 4.7.14.7.2Patched before disclosure
10 Apr 2025WP Maps - Display Google Maps Perfectly with Ease <= 4.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 4.7.14.7.2Patched before disclosure
28 Jun 2024WordPress Plugin for Google Maps - WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection8.8<= 4.6.14.6.2Patched before disclosure
13 Mar 2023WP Google Map Plugin <= 4.4.2 - Cross-Site Request Forgery via delete()5.4<= 4.4.24.4.3n/a
20 Jan 2023WP MAPS <= 4.3.9 - Authenticated (Editor+) Stored Cross-Site Scripting5.5<= 4.3.94.4.0n/a
22 Feb 2022WP MAPS - Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.2.3 - Cross-Site Request Forgery5.4< 4.2.44.2.4n/a
25 Nov 2020WP Google Map Plugin <= 4.1.4 - Authenticated SQL Injection via Orderby7.2<= 4.1.44.1.5n/a
21 Sep 2019WP Google Map Plugin <= 4.0.9 - Cross-Site Request Forgery to PHP Object Injection8.8< 4.1.04.1.0n/a
21 Sep 2019WP MAPS - Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.0.9 - Reflected Cross-Site Scripting6.1<= 4.0.94.1.0n/a
27 Apr 2018WP MAPS - Easiest & Most Advanced WordPress Plugin for Google Maps < 4.0.4 - Cross-Site Scripting5.4< 4.0.44.0.4n/a

Changelog mentions of security fixes: 4.9.5 (vulnerability, XSS, escaping, sanitize); 4.9.7 (security); 4.9.8 (security, vulnerability); 5.0.0 (security, SQL injection, escaping); 5.0.3 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

50% of 2 support threads resolved in the last 2 months.

Momentum

60,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Maps
4 May 202618,882
11 May 20265,019
18 May 20265,662
25 May 202621,576
1 Jun 20264,387
8 Jun 20264,233
15 Jun 20262,959
22 Jun 20262,120
29 Jun 20261,934
6 Jul 20263,659
13 Jul 20261,705
20 Jul 202621,622
27 Jul 202621,426
3 Aug 20267,856
10 Aug 202620,166
17 Aug 20267,849
24 Aug 20263,961
31 Aug 202619,354
7 Sep 202621,984
14 Sep 20267,408
21 Sep 202621,891
28 Sep 20264,664
5 Oct 202621,630
12 Oct 20265,175
19 Oct 20264,289
26 Oct 202623,211
2 Nov 2026938

Weekly downloads over the last 4 weeks are 21% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

API KEY for Google MapsScore 100 · 30,000+Maps Widget for Google MapsScore 100 · 20,000+Maps Plugin using Google Maps forScore 96 · 10,000+Leaflet MapScore 91 · 30,000+Easy Google Maps by SupsysticScore 88 · 20,000+

Facts

Version5.0.3
AuthorFlipper Code - WordPress Development Company
Added15 Mar 2013
Last updated28 Oct 2026
Active installs60,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.0
CategoryE-commerce & Shopping
Tagsmap, maps, Google Maps, openstreetmap, Store locator

Other plugins by this author: Text Prompter - Unlimited chatgpt text prompts for openai tasks, Advanced Datatable - The Ultimate Data Table Plugin

Questions

Is WP Maps still maintained?

Yes. Last release 28 Oct 2026, 30 releases in the last 24 months.

Who owns WP Maps, and has it changed hands?

No change recorded. Main committer flippercode since Mar 2013.

Was WP Maps removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WP Maps safe?

31 known vulnerabilities, all fixed (latest in 5.0.0). Not on the exploited list.

Is the latest WP Maps update safe to install?

No ownership change before 5.0.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue