Top Map WordPress Plugins
40 indexed plugins
Plugins
40
Active Installs
523k+
Average Score
56
Audited
40
Top Scores
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Gmap Block | 100 | 0 | 10k+ | No open findings | |||
| #2 | CBX Map for Google Map & OpenStreetMap | 100 | 0 | 900 | No open findings | |||
| #3 | Maps Widget for Google Maps | 99 | 1 | 2 | 20k+ | Short URL found | ||
| #4 | Map Block | 98 | 2 | 5 | 7k+ | Missing direct file access protection | ||
| #5 | Responsive Image Maps | 98 | 3 | 1 | 4k+ | Missing direct file access protection | ||
| #6 | WP Go Maps Block | 98 | 1 | 10 | 3k+ | Not In Footer | ||
| #7 | Block for Embed Google Maps | 96 | 5 | 2 | 400 | block api version too low | ||
| #8 | Autocomplete Location Field for Contact Form 7 | 88 | 3 | 9 | 1k+ | Missing nonce verification | ||
| #9 | Flexible Map | 85 | 10 | 7 | 7k+ | Non-prefixed class | ||
| #10 | Ventus – Weather Map Widget & Shortcode | 84 | 88 | 3 | 3k+ | Text Domain Mismatch | ||
| #11 | Meks Easy Maps | 82 | 13 | 13 | 800 | Input is not sanitized | ||
| #12 | MapGeo – Interactive Geo Maps | 81 | 46 | 30k+ | Non-prefixed hook name | |||
| #13 | BP xProfile Location | 74 | 7 | 24 | 500 | Missing nonce verification | ||
| #14 | ACF: Yandex Maps Field | 68 | 73 | 10 | 800 | Text Domain Mismatch | ||
| #15 | Map Block Leaflet | 67 | 52 | 7 | 600 | Short PHP open tag found | ||
| #16 | GPX Viewer | 65 | 15 | 30 | 900 | Output is not escaped | ||
| #17 | Maps Plugin using Google Maps for WordPress – WP Google Map | 53 | 6 | 43 | 10k+ | Missing nonce verification | ||
| #18 | Travel Map | 52 | 36 | 11 | 1k+ | Output is not escaped | ||
| #19 | Product Bundles – Variation Bundles | 52 | 23 | 13 | 600 | Output is not escaped | ||
| #20 | Interactive Globes – 3D World Maps | 51 | 24 | 104 | 400 | Non-prefixed global variable | ||
| #21 | WP Realtime Sitemap | 39 | 46 | 41 | 9k+ | Output is not escaped | ||
| #22 | Maps for WP | 39 | 169 | 73 | 400 | Output is not escaped | ||
| #23 | Leaflet Map | 38 | 67 | 32 | 30k+ | Output is not escaped | ||
| #24 | Shipping Zones by Drawing for WooCommerce | 38 | 69 | 91 | 500 | Output is not escaped | ||
| #25 | Trackserver | 38 | 17 | 356 | 400 | Input is not sanitized | ||
| #26 | Map Block for Google Maps | 35 | 6 | 5 | 20k+ | Hidden files included | ||
| #27 | Simple Map | 35 | 10 | 1 | 10k+ | Output is not escaped | ||
| #28 | Basic Google Maps Placemarks | 35 | 189 | 80 | 3k+ | Output is not escaped | ||
| #29 | WP Open Street Map | 35 | 59 | 111 | 3k+ | Input is not validated | ||
| #30 | WP Geo | 35 | 180 | 84 | 800 | Output is not escaped | ||
| #31 | Out of the Block: OpenStreetMap | 35 | 9 | 4 | 700 | Missing direct file access protection | ||
| #32 | Event Post | 34 | 329 | 99 | 1k+ | Output is not escaped | ||
| #33 | Travelers' Map | 31 | 311 | 132 | 1k+ | Output is not escaped | ||
| #34 | Themify Store Locator | 31 | 237 | 125 | 400 | Text Domain Mismatch | ||
| #35 | Custom WP Store Locator | 31 | 27 | 245 | 400 | Non-prefixed global variable | ||
| #36 | MapSVG – Vector maps, Image maps, Google Maps | 26 | 92 | 56 | 1k+ | Missing direct file access protection | ||
| #37 | WP Go Maps – Google Map, OpenStreetMap, Leaflet Map | 25 | 5,062 | 1,024 | 300k+ | Unsafe printing function | ||
| #38 | Open User Map – Interactive Leaflet Maps | 25 | 864 | 1,036 | 10k+ | Non-prefixed global variable | ||
| #39 | Easy Google Maps | 24 | 1,678 | 660 | 20k+ | Non Singular String Literal Domain | ||
| #40 | Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) | 19 | 3,275 | 3,228 | 9k+ | Output is not escaped |
