WP Store Locator
Healthy: released yesterday, tested with WordPress 7.1, no open vulnerabilities.
Based on 4 of 5 areas
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 70 |
| Support | 67 |
| Reputation | No data |
Quick answers
- Is WP Store Locator still maintained?
- Yes. Last release 3 Nov 2026, 18 releases in the last 24 months. 3 Nov 2026 · wordpress.org
- Who owns WP Store Locator, and has it changed hands?
- No change recorded. Main committer tijmensmit since Dec 2013. 4 Nov 2026 · SVN log
- Was WP Store Locator removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is WP Store Locator safe?
- 4 known vulnerabilities, all fixed (latest in 3.1.0). Not on the exploited list. 8 Oct 2026 · Wordfence Intelligence
- Is the latest WP Store Locator update safe to install?
- No ownership change before 3.1.1. No one-star spike after it. 26 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
- InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| tijmensmit | 31 Dec 2013 to 3 Nov 2026, 260 commits |
|---|
1 committer recorded. No ownership changes recorded since 2013.
Maintenance
- Last release
- yesterday
- Releases, 24 months
- 18
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 1 |
| Q2 2025 | 4 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 1 |
| Q2 2026 | 2 |
| Q3 2026 | 7 |
| Q4 2026 | 2 |
Last release 3 Nov 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 4.8.
| Last 90 days | No reviews |
|---|---|
| Lifetime | 4.8 |
| Q4 2023 | 5.0 |
|---|---|
| Q1 2024 | 5.0 |
| Q2 2024 | 5.0 |
| Q3 2024 | 5.0 |
| Q4 2024 | 5.0 |
| Q1 2025 | 5.0 |
| Q2 2025 | 5.0 |
| Q3 2025 | 5.0 |
| Q4 2025 | 5.0 |
| Q1 2026 | 5.0 |
| Q2 2026 | 5.0 |
Average rating stayed at 5.0 between Q4 2023 and Q2 2026.
| 5 star | 289 |
|---|---|
| 4 star | 9 |
| 3 star | 3 |
| 2 star | 3 |
| 1 star | 8 |
- Works OK but lousy support · 1 star · 17 Oct 2023
Security record
4 vulnerabilities in 24 months, all patched (latest fixed in 3.1.0).
Show 4 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 8 Oct 2026 | WP Store Locator <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 3.0.3 | 3.1.0 | Before disclosure |
| 24 Sep 2026 | WP Store Locator < 3.0.0 - Unauthenticated Denial of Service | 7.5 | < 3.0.0 | 3.0.0 | Before disclosure |
| 22 Apr 2026 | WP Store Locator <= 2.2.261 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsl_address' Post Meta | 6.4 | <= 2.2.261 | 2.3.0 | Before disclosure |
| 31 Jul 2025 | Store Locator <= 2.2.260 - Authenticated (Contributor+) PHP Object Injection | 7.5 | <= 2.2.260 | 2.2.261 | 65 |
Changelog mentions of security fixes: 2.3.1 (sanitize); 3.1.0 (XSS); 3.1.1 (escaping).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
67% of 18 support threads resolved in the last 2 months.
Momentum
40,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 13,203 |
|---|---|
| 11 May 2026 | 7,026 |
| 18 May 2026 | 6,292 |
| 25 May 2026 | 2,989 |
| 1 Jun 2026 | 2,488 |
| 8 Jun 2026 | 17,149 |
| 15 Jun 2026 | 4,726 |
| 22 Jun 2026 | 3,039 |
| 29 Jun 2026 | 2,838 |
| 6 Jul 2026 | 20,341 |
| 13 Jul 2026 | 4,197 |
| 20 Jul 2026 | 15,744 |
| 27 Jul 2026 | 6,991 |
| 3 Aug 2026 | 6,398 |
| 10 Aug 2026 | 2,737 |
| 17 Aug 2026 | 2,519 |
| 24 Aug 2026 | 18,439 |
| 31 Aug 2026 | 4,911 |
| 7 Sep 2026 | 3,084 |
| 14 Sep 2026 | 4,202 |
| 21 Sep 2026 | 44,997 |
| 28 Sep 2026 | 7,330 |
| 5 Oct 2026 | 21,718 |
| 12 Oct 2026 | 5,148 |
| 19 Oct 2026 | 4,723 |
| 26 Oct 2026 | 22,082 |
| 2 Nov 2026 | 1,204 |
Weekly downloads over the last 4 weeks are 13% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score. Never sponsored.
Facts
| Version | 3.1.1 |
|---|---|
| Author | tijmensmit |
| Added | 31 Dec 2013 |
| Last updated | 3 Nov 2026 |
| Active installs | 40,000+ |
| Requires WordPress | 5.7 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | E-commerce & Shopping |
| Tags | Google Maps, store finder, openstreetmap, Store locator, dealer locator |
Questions
Is WP Store Locator still maintained?
Yes. Last release 3 Nov 2026, 18 releases in the last 24 months.
Who owns WP Store Locator, and has it changed hands?
No change recorded. Main committer tijmensmit since Dec 2013.
Was WP Store Locator removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is WP Store Locator safe?
4 known vulnerabilities, all fixed (latest in 3.1.0). Not on the exploited list.
Is the latest WP Store Locator update safe to install?
No ownership change before 3.1.1. No one-star spike after it.