Add unlimited Google Maps, Leaflet & OpenStreetMap to WordPress. Create a map, map block or store locator — no API key needed for free maps.
32
Score
696
Errors
129
Warnings
+0
Change
Category Scores
Security0
Repo94
Performance100
Maintainability40
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
I18n
615
4 issue groups
Security
120
11 issue groups
Maintainability
79
10 issue groups
ERRORI18nMissing Arg DomainMissing $domain parameter in function call to __().563
- Category
- I18n
- Occurrences
- 563
- Severity
- error
Sample message
Missing $domain parameter in function call to __().
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.45
- Category
- I18n
- Occurrences
- 45
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script type='text/html' class='mapp-tmpl' id='$template_id'>$template</script>"'.35
- Category
- Security
- Occurrences
- 35
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"<script type='text/html' class='mapp-tmpl' id='$template_id'>$template</script>"'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().25
- Category
- Maintainability
- Occurrences
- 25
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $fields17
- Category
- Security
- Occurrences
- 17
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $fields
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable $maps_table at " AND $maps_table.oid = %d "16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable $maps_table at " AND $maps_table.oid = %d "
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.13
- Category
- Security
- Occurrences
- 13
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['name']11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['name']
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
Show 15 moreShow less
WARNINGSecurityDatabase parameter is not escaped8
- Category
- Security
- Occurrences
- 8
- Severity
- warning
Sample message
Unescaped parameter $maps_table used in $wpdb->get_col()\n$maps_table assigned unsafely at line 465.
ERRORSecurityUnsafe printing function7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGMaintainabilityNo PHP code found6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
No PHP code was found in this file and short open tags are not allowed by this install of PHP. This file may be using short open tags but PHP does not allow them.
ERRORSecurityDatabase parameter is not escaped6
- Category
- Security
- Occurrences
- 6
- Severity
- error
Sample message
Unescaped parameter $fields used in $wpdb->get_results()\n$fields assigned unsafely at line 227.
ERRORI18nUnordered Placeholders Text6
- Category
- I18n
- Occurrences
- 6
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Invalid lat/lng coordinate: %s,%s'.
WARNINGMaintainabilityNon-prefixed hook name4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "excerpt_more".
WARNINGSecurityRequest data is not unslashed3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
$_REQUEST['mp_dev'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityLocalhost URL found2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Do not use Localhost/127.0.0.1/*.local in your code. Found: https://localhost/
WARNINGMaintainabilityDiscouraged PHP function2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The use of function ini_set() is discouraged
WARNINGMaintainabilitySchema Change2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
ERRORSecurityLike Wildcards In Query With Placeholder2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
SQL wildcards for a LIKE query should be passed in through a replacement parameter and the variable part of the replacement should be escaped using "esc_like()". Found: like '%%%s%%'.
WARNINGMaintainabilityslow db query meta key2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_key, possible slow query.
WARNINGMaintainabilityerror log print r2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
print_r() found. Debug code should not normally be used in production.
WARNINGSecurityInput is not validated2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_SERVER['REMOTE_ADDR']. Check that the array index exists before using it.
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
External Connections
Potential connections found in static code analysis.
Outbound calls
109
External assets
2
Incoming endpoints
16
Notable Domains
mappresspro.com44 · outbound
api.mapbox.com6 · outbound
leafletjs.com3 · outbound
tiles.openfreemap.org3 · outbound
account.mapbox.com2 · outbound
en.wikipedia.org2 · outbound
Platform / Reference Domains
github.com10 · platform/reference
core.trac.wordpress.org8 · platform/reference
w3.org4 · platform/reference
wordpress.org3 · platform/reference
External Asset Domains
fonts.gstatic.com2 · asset
Incoming Endpoints
wp_ajax_nopriv_mapp_get_postpublic
wp_ajax
Admin AJAX endpoints15
wp_ajax_mapp_dismissauthenticated
wp_ajax
wp_ajax_mapp_geocodeauthenticated
wp_ajax
wp_ajax_mapp_get_postauthenticated
wp_ajax
wp_ajax_mapp_license_checkauthenticated
wp_ajax
wp_ajax_mapp_option_saveauthenticated
wp_ajax
wp_ajax_mapp_options_resetauthenticated
wp_ajax
wp_ajax_mapp_options_saveauthenticated
wp_ajax
wp_ajax_mapp_preferences_saveauthenticated
wp_ajax
wp_ajax_mapp_review_snoozeauthenticated
wp_ajax
wp_ajax_mapp_style_deleteauthenticated
wp_ajax
wp_ajax_mapp_style_saveauthenticated
wp_ajax
wp_ajax_mapp_tpl_deleteauthenticated
wp_ajax
3 more hidden
Score History
4 score snapshots
v2.97.8
32
Latest
- Findings
- 825
- Errors
- 696
- Warnings
- 129
- Check
- 2.0.0
v2.97.7
32
Score
- Findings
- 824
- Errors
- 696
- Warnings
- 128
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 32 | 825 | 696 | 129 | v2.97.8 | 2.0.0 |
| 32 | 824 | 696 | 128 | v2.97.7 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
LiteSpeed Cache35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreAdvanced Custom Fields (ACF®)23 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreWP Go Maps – Google Map, OpenStreetMap, Leaflet Map25 scoreiframe74 scoreWP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters33 scoreWP Store Locator35 scoreAPI KEY for Google Maps94 score
Author
Issue
Domain
Related
LiteSpeed Cache35 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scoreAdvanced Custom Fields (ACF®)23 scoreMonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)25 scoreWP Go Maps – Google Map, OpenStreetMap, Leaflet Map25 scoreiframe74 scoreWP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters33 scoreWP Store Locator35 scoreAPI KEY for Google Maps94 score
Related Plugins
Maps Widget for Google Maps
30k+ active installs
99
Image Hotspot by DevVN
20k+ active installs
99
Maps from Yandex for Elementor
7k+ active installs
99
Mobile Call Now & Map Buttons
4k+ active installs
99
Extensions for Leaflet Map
3k+ active installs
99
Very Simple Google Maps
3k+ active installs
99