OSM Map Widget for Elementor

OSM Map Widget for Elementor has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for OSM Map Widget for Elementor has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. OSM Map Widget for Elementor is installed on roughly 9,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all OSM Map Widget for Elementor vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-8619

OSM Map Widget for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL

Read the full analysis

Vulnerability Records

2 records
Plugin Profile
Latestv1.3.1

OSM Map Widget for Elementor

garbowza

Author

garbowza

4.5(8)
90/100
Last Updated
2025-09-05 (1y ago)
Active Installs
9,000+
Downloads
70,888
Requires WP
6.0+
Requires PHP
7.3+
Tested up to
WP 6.8.8
Created
2020-09-08 (6y ago)

A free Elementor Map Widget that utilizes Open Street Map. Comes with features like adding multiple markers, and choosing from a library of custom tiles to change the look and feel. Requires Elementor Page Builder Plugin Version: 3.5+ This plugin is open sourced so feel free to contribute to it by: 1. Adding a topic/issue here 2. Submitting a pull request with any well-written code that implements the desired feature. Usage Make sure that Elementor plugin is installed Add optional API Keys to the settings page: Google Maps API Key (Used to autocomplete and update the coordinates of markers in a map. Need help to get a Google map API key? Read this resource) Mapbox Access Token (Used for custom tiles. Need help to get a Mapbox Access Token? Read this resource) Geoapify API Key (Used for custom tiles. Need help to get a Geoapify API key? Read this resource) Add OSM Map widget to your elementor page and have fun 🙂 Find OSM Map widget from elements listing and add it to your elementor page Add multiple markers, change Zoom level style them accordingly Editing the markers: A marker’s settings contains Title, Location, Coordinates, Description, Button Text, and Button URL fields. Of those fields, only the Coordinates field is required to render a marker on the map. If you have a Google Maps API key added, you’ll be able to automatically populate the coordinates field without manually doing so. Change Tiles from style section requires Mapbox Access Token and Geoapify API Key

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C