PeproDev Branches Map (Mapify)

PeproDev Branches Map (Mapify) has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for PeproDev Branches Map (Mapify) has a vendor fix available, so running the current release closes it.

All of these findings were reported by Nabil Irawan. PeproDev Branches Map (Mapify) is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all PeproDev Branches Map (Mapify) vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-9373

PeproDev Branches Map <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
PeproDev Branches Map (Mapify) banner
Latestv3.0.2

PeproDev Branches Map (Mapify)

Pepro Dev. Group

Author

Pepro Dev. Group

5.0(1)
100/100
Last Updated
2026-10-09 (10d ago)
Active Installs
20+
Downloads
3,390
Requires WP
6.5+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2020-08-13 (6y ago)

Add branches (address, phone, social links, location) and show them on a map with a searchable list, popups and clusters. Use the Elementor widget, the WPBakery Page Builder element or the shortcode. Map engines 20 free tile styles with no key: OpenStreetMap (standard, grayscale, dark, vintage, Humanitarian, France, Germany), CyclOSM, OpenTopoMap and Esri (light, dark, street, topographic, National Geographic, satellite, satellite with labels, terrain, shaded relief, physical, ocean) Google Maps with five built-in styles or a cloud Map ID (Advanced Markers) Mapbox (built-in and Mapbox Studio styles) Persian maps: Map.ir, Neshan, Parsimap and Mapup (Mapup needs no key) Any XYZ tile server Offline map of Iran (SVG, 31 provinces, no external requests). Branches are placed by latitude/longitude, provinces with branches are highlighted and clicking a province filters the list Zoom buttons, mouse wheel, double click and pinch zoom on every map, including the offline Iran map Page builders Elementor widget “Branches Map” with full content settings and a Style tab (map, pins, tooltip, clusters, popup, list, search box and regions — colors, typography, borders, shadows, responsive sizes) WPBakery Page Builder element with the same settings in tabs, a thumbnail style picker and Design Options [pepro-mapify] / [mapify] shortcode, with a visual Shortcode Builder and live preview (Branches → Shortcode Builder) Thumbnail gallery pickers for tile styles and Google styles in Elementor, WPBakery and the Shortcode Builder Branches list and popups Three list layouts: chips, cards and a detailed list, with a search box and grouping by category Picking a branch in the list scrolls the page to the map and opens its popup (both can be turned off) Pin color and pin image per branch Popup template with tags; popup image from the featured image, the branch pin image, or none Get directions button: Android lists the map apps installed on the phone, other devices open Google Maps Other Up to 15 branches Branches and categories in Tools → Export and in the REST API (wp/v2/mapify, wp/v2/mapify_category, mapify/v1/branches, mapify/v1/categories) Settings page built with WordPress components (Branches → Map Settings) Branch editor with an OpenStreetMap location picker and address search Single branch card with directions links (Google Maps, Waze, Neshan, Balad) Ready for WPML (wpml-config.xml: branches, categories, branch details, widget and shortcode texts) and Polylang Persian (fa_IR) translation, RTL support Maps show a small “© PeproDev Mapify” credit next to the map provider attribution. Shortcode [pepro-mapify maptype="iran" branchplacement="end" list_layout="cards"] Every option of the builders is an attribute (see the Shortcode Builder for the full list). Enclosed content is used as the popup template: [pepro-mapify maptype="osm"]<h3>{title}</h3><p>{address}</p>[/pepro-mapify] Popup tags: {id} {title} {image} {pin_image} {popup_image} {url} {latitude} {longitude} {address} {phone} {site} {email} {twitter} {facebook} {instagram} {telegram} {linkedin} {additional} {categories} {directions}. Use {tag|fallback} for a default value. Shortcodes made with version 1.x keep working. About Us PEPRO DEV is a premium supplier of quality WordPress plugins, services and support. Join us at https://peprodev.com/ and also don’t forget to check our free offerings, we hope you enjoy them!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C