Events Manager – OpenStreetMaps
Events Manager – OpenStreetMaps has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Events Manager – OpenStreetMaps has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by theviper17y. Events Manager – OpenStreetMaps is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.0.14.
CVE-2025-58265Events Manager – OpenStreetMaps <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Events Manager – OpenStreetMaps
Author
Stonehenge Creations
Requires Events Manager to be installed & activated. 0% Google, 100% open source. Use the free and open source OpenStreetMap to show your Events Manager Location Maps. Existing locations work right out-of-the-box and creating new ones is extremely easy! This plugin completely replaces the original Google Maps API (paid) with OpenStreetMap (open source). Once installed and activated, this plugin will automatically disable the Google Maps integration in Events Manager for you and replace them with OpenStreetMaps. When you uninstall this plugin, those adaptions will be reversed automatically. Available Options: – Set Marker Color per location. – Set Map Type per location. – Set default Marker Color. – Set default Map Type. – Set default Zoom Level. – Show/hide Zoom Controls. – Show/hide current Zoom Level. – Show/hide Full Screen Control. – Show/hide Map Scale (metric & imperial). – Apply filters to change the default map tile server. – Apply filters to change the single location map tile server. – Apply filters to change the default marker markup. – Apply filters to change the single location marker markup. There are currently 12 different map tile servers available (overview in the Plugin Settings Page), but you can add your own by using filters. Geolocation Search is currently not available when using this plugin. Localisation US English (default) Dutch (included & updated) French (included) German (included) The plugin is ready to be translated, all texts are defined in the POT file. Any contributions to localize this plugin are very welcome! Feedback I am open to your suggestions and feedback! Please also check out my other plugins.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C