Map WordPress Plugins That Need Review
38 indexed plugins
Plugins
38
Active Installs
543k+
Average Score
55
Audited
38
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) | 19 | 3,275 | 3,228 | 10k+ | Output is not escaped | ||
| #2 | Easy Google Maps | 24 | 1,764 | 389 | 20k+ | Non Singular String Literal Domain | ||
| #3 | WP Go Maps – Google Map, OpenStreetMap, Leaflet Map | 25 | 4,996 | 1,008 | 300k+ | Unsafe printing function | ||
| #4 | Open User Map – Interactive Leaflet Maps | 26 | 893 | 986 | 10k+ | Non-prefixed global variable | ||
| #5 | Travelers' Map | 30 | 311 | 155 | 1k+ | Output is not escaped | ||
| #6 | Themify Store Locator | 31 | 244 | 125 | 500 | Text Domain Mismatch | ||
| #7 | Event Post | 34 | 329 | 99 | 1k+ | Output is not escaped | ||
| #8 | Basic Google Maps Placemarks | 35 | 189 | 80 | 3k+ | Output is not escaped | ||
| #9 | Map Block for Google Maps | 35 | 6 | 5 | 20k+ | Hidden files included | ||
| #10 | MapSVG – Vector maps, Image maps, Google Maps | 35 | 74 | 47 | 1k+ | Missing direct file access protection | ||
| #11 | Out of the Block: OpenStreetMap | 35 | 9 | 4 | 700 | Missing direct file access protection | ||
| #12 | Shipping Zones by Drawing for WooCommerce | 35 | 278 | 95 | 600 | Text Domain Mismatch | ||
| #13 | Simple Map | 35 | 10 | 1 | 10k+ | Output is not escaped | ||
| #14 | WP Geo | 35 | 180 | 84 | 900 | Output is not escaped | ||
| #15 | WP Open Street Map | 35 | 59 | 111 | 3k+ | Input is not validated | ||
| #16 | Trackserver | 38 | 17 | 356 | 400 | Input is not sanitized | ||
| #17 | Leaflet Map | 39 | 59 | 32 | 30k+ | Output is not escaped | ||
| #18 | Maps for WP | 39 | 169 | 73 | 400 | Output is not escaped | ||
| #19 | WP Realtime Sitemap | 39 | 46 | 41 | 10k+ | Output is not escaped | ||
| #20 | Maps Plugin using Google Maps for WordPress – WP Google Map | 48 | 289 | 38 | 10k+ | wp function not compatible with requires wp | ||
| #21 | Interactive Globes – 3D World Maps | 51 | 24 | 104 | 400 | Non-prefixed global variable | ||
| #22 | Product Bundles – Variation Bundles | 52 | 23 | 13 | 600 | Output is not escaped | ||
| #23 | Travel Map | 52 | 36 | 11 | 1k+ | Output is not escaped | ||
| #24 | MapGeo – Interactive Geo Maps | 59 | 14 | 51 | 40k+ | Non-prefixed hook name | ||
| #25 | Map Block Leaflet | 67 | 52 | 7 | 700 | Short PHP open tag found | ||
| #26 | ACF: Yandex Maps Field | 68 | 73 | 10 | 800 | Text Domain Mismatch | ||
| #27 | GPX Viewer | 71 | 10 | 26 | 900 | Missing Version | ||
| #28 | BP xProfile Location | 74 | 7 | 24 | 600 | Missing nonce verification | ||
| #29 | Meks Easy Maps | 82 | 13 | 13 | 900 | Input is not sanitized | ||
| #30 | Ventus – Weather Map Widget & Shortcode | 84 | 88 | 3 | 3k+ | Text Domain Mismatch | ||
| #31 | Flexible Map | 85 | 10 | 7 | 7k+ | Non-prefixed class | ||
| #32 | Autocomplete Location Field for Contact Form 7 | 88 | 3 | 9 | 1k+ | Missing nonce verification | ||
| #33 | Block for Embed Google Maps | 96 | 5 | 2 | 400 | block api version too low | ||
| #34 | Map Block | 98 | 2 | 5 | 6k+ | Missing direct file access protection | ||
| #35 | Responsive Image Maps | 98 | 3 | 1 | 4k+ | Missing direct file access protection | ||
| #36 | WP Go Maps Block | 98 | 1 | 10 | 3k+ | Not In Footer | ||
| #37 | Gmap Block | 99 | 1 | 0 | 10k+ | outdated tested upto header | ||
| #38 | Maps Widget for Google Maps | 99 | 1 | 2 | 30k+ | Short URL found |
