OS DataHub Maps

OS DataHub Maps has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 1 of the records (100%).

The one issue recorded for OS DataHub Maps has a vendor fix available, so running the current release closes it.

All of these findings were reported by Williwollo (CybrX). OS DataHub Maps is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSHigh
8.8/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all OS DataHub Maps vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2026-1730

OS DataHub Maps <= 1.8.3 - Authenticated (Author+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

1 records
OS DataHub Maps banner
Latestv1.8.4

OS DataHub Maps

skirridsystems

Author

skirridsystems

5.0(16)
100/100
Last Updated
2026-02-02 (7mo ago)
Active Installs
200+
Downloads
9,830
Requires WP
4.5+
Requires PHP
5.6.0+
Tested up to
WP 6.9.7
Created
2020-09-07 (6y ago)

This plugin allows maps to be inserted into a page or post using the new Ordnance Survey Data Hub platform which launched in 2020. It displays UK Ordnance Survey maps with their legendary level of topographical detail, making them ideal for walking, cycling, riding, and just about anything outdoors-related. You can add routes from GPX files, elevation profiles, and markers for points of interest. The plugin takes over where the previous plugin, OS OpenSpace Maps, left off. Using the new OS Data Hub and its suite of APIs, you now have access to the full 1:25,000 Explorer mapping as well as the 1:50,000 Landranger series. And the free allowances are a lot more generous, offering typically 2,000,000 map views per month. This plugin uses Leaflet.js to display the maps, giving a clean interface and a responsive feel with easy zoom control, full screen view and even printing. Insert the [osmap] shortcode anywhere in your post, page or custom post type content to display a map. The map is set up using shortcode attributes, and there are now more of these than can be described in this Readme file. For full details, please check the plugin homepage. Additional Shortcodes Display one of the marker icons inline with your text using [osmap_marker color=red]. This may be used to add annotation to your maps. Use [osmap_link marker=1 zoom=8] in conjunction with marker_link=link attribute to embedded a link within text on the page. When clicked, the map will be scrolled into view, zoomed onto the marker position and the marker opened. Examples [osmap] displays a map at the default height and zoom level, centred on OS headquarters in Southampton. This is the simplest way to test that the plugin is working. [osmap height="300" width="300" color="blue" gpx="http://www.example.co.uk/myfile.gpx"] displays a 300px by 300px window containing a blue track from the file specified. [osmap markers="NY2000008000;Wasdale"]shows a default size and zoom window with a marker placed and the popup text “Wasdale” Migration from OS OpenSpace Maps Ordnance Survey has now shut down the OpenSpace Maps service. This plugin aims to give a seamless upgrade to use the new Data Hub Maps service instead. It uses the same shortcode and all the same attributes are supported. The Data Hub service is a significant upgrade from OpenSpace, allowing use of the excellent 1:25,000 Explorer mapping. It also has a much more generous free data allowance, typically 2 million map views per month. The plugin itself is also a major upgrade, with many more features than the original OpenSpace plugin.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C