MapSVG – Vector maps, Image maps, Google Maps

Create interactive vector maps, floor plans, and image maps. Support for Google Maps integration, custom markers, tooltips, and popups.

v8.13.2RomanCodeUpdated Added 1k+ installs90% rating
35
Score
74
Errors
47
Warnings
+0
Change

Category Scores

Security13
Repo82
Performance100
Maintainability29

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

121 findings

Maintainability

82

19 issue groups

Security

23

5 issue groups

I18n

2

1 issue group

ERRORMaintainabilitymissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;35
Category
Maintainability
Occurrences
35
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon Prefixed Variable FoundGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$file".9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$file".

ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.9
Category
Maintainability
Occurrences
9
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

ERRORSecurityOutput Not EscapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\nSummary: $passed/$total tests passed\n"'.7
Category
Security
Occurrences
7
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\nSummary: $passed/$total tests passed\n"'.

WARNINGSecuritywp redirect wp redirectwp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.7
Category
Security
Occurrences
7
Severity
warning

Sample message

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

WARNINGSecurityRecommendedProcessing form data without nonce verification.5
Category
Security
Occurrences
5
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilityNot AllowedUse of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

Show 15 more
ERRORMaintainabilitywp function not compatible with requires wp3
Category
Maintainability
Occurrences
3
Severity
error

Sample message

Function "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.0.0.

ERRORMaintainabilityFound2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

The use of function move_uploaded_file() is forbidden

WARNINGSecurityUnescaped DBParameter2
Category
Security
Occurrences
2
Severity
warning

Sample message

Unescaped parameter $table used in $wpdb-&gt;get_results()

WARNINGSecurityInterpolated Not Prepared2
Category
Security
Occurrences
2
Severity
warning

Sample message

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable {$table} at &quot;SELECT * FROM `{$table}`&quot;

ERRORMaintainabilitydate date2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNINGMaintainabilityNon Prefixed Constant Found2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;CLOCKWORK_ENABLE&quot;.

ERRORI18nText Domain Mismatch2
Category
I18n
Occurrences
2
Severity
error

Sample message

Mismatched text domain. Expected 'mapsvg-lite-interactive-vector-maps' but got 'mapsvg'.

WARNINGMaintainabilitySchema Change1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Attempting a database schema change is discouraged.

ERRORMaintainabilitymysql mysqli errno1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_errno.

ERRORMaintainabilitymysql mysqli error1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_error.

ERRORMaintainabilitymysql mysqli free result1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_free_result.

ERRORMaintainabilitymysql mysqli multi query1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_multi_query.

ERRORMaintainabilitymysql mysqli next result1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_next_result.

ERRORMaintainabilitymysql mysqli store result1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Accessing the database directly should be avoided. Please use the $wpdb object and associated functions instead. Found: mysqli_store_result.

WARNINGMaintainabilityslow db query meta key1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

Score History

First score snapshot

v8.13.2

35

Latest

Findings
121
Errors
74
Warnings
47
Check
2.0.0

Related Plugins

Maps Widget for Google Maps

30k+ active installs

99
Responsive Image Maps

4k+ active installs

98
WP Go Maps Block

3k+ active installs

98
API KEY for Google Maps

40k+ active installs

94
Flexible Map

7k+ active installs

85