WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters
WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-5194WP Map Block <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

WP Map Block – Google Maps, OpenStreetMap, Mapbox, Store & Shop Locator, Directory, Listings & Filters
Author
Tushar Imran
WP Map Block is an all-in-one interactive map builder for WordPress. Build a map visually — drop markers, draw regions, pull live locations from your content — then publish anywhere with a Gutenberg block or a shortcode. No API key is required to get started with OpenStreetMap or Google Maps. Design your map on a live canvas, choose from nine map providers, and add everything from a single pin to a full store locator. It’s the fastest way to put your locations on the map, whether you need a simple contact map or a data-driven directory. Why you’ll love WP Map Block: Visual builder: Design on a live preview with place search, drag-to-reposition markers and instant feedback — no code needed. Nine map providers: OpenStreetMap and Google Maps are free; Mapbox, MapTiler, OpenFreeMap, Stadia, Esri, CARTO and Azure add even more styles, plus Road, Satellite, Hybrid and Terrain views. Rich markers: Unlimited markers with categories, a custom icon library, popup images, and bounce / drop / pulse animations. Dynamic & scalable: Auto-plot posts, custom post types, ACF fields and REST sources; cluster thousands of points or render them as a heatmap. Store locator & directory: Radius search, geolocation, filters and a browsable, collapsible list — turn any map into a locator. Backward compatible: Every existing map keeps working, and you can import/export maps as JSON, CSV, KML or GPX. Most convenient way to add Google Maps & OpenStreetMap in Gutenberg. WP Map Block gives you a clean, straightforward interface to add and customize maps for Gutenberg-supported posts, pages and custom post types — without wrestling with API keys or heavy configuration. ⭐ Live Demo ⭐ Docs Plugin Features ✅ Google Maps OpenStreet Maps Multiple Marker Zoom Control Full Screen Map Control Custom Marker Icon & Popup Map Width & Height Latitude and Longitude Generator from address Set any marker as center position Marker Builder Draggable Marker Don’t need any API key 🗺️Google Map: Set the default Google Map on any page or post of your WordPress site. With a single click, you can select this map anywhere on your site using WP Map Block. 🛣️OpenStreet Maps: We’ve included this option for you so you can enable OpenStreet Maps and tweak it within your site. OpenStreet Map is an open-source map where you can contribute to improving the quality of data on the map. Every update you make to Open Street Map is owned by both you and the community as a whole. 📌Multiple Marker: By default, a marker will appear on the map based on your location. But you can add additional markers on your map by customizing the settings. Also, set the title and content for the marker as well as set the default position of the marker. 🔎 Zoom Control: Zoom in and out of the map with ease using the zoom option. The map works quickly since it is built using LeafletJS, and it does not take long to load the map after zooming in or out. 📲Full-Screen Map Control: Get a full-screen map view while using the map presented by this plugin. You can control the map very comfortably within the full screen and navigate the whole map freely. 🛠️ Custom Marker Icon & Popup: Explore the settings and customize the marker on your map. You can place custom markers on the map and also place your preferred popups on the map. 🎚️Map Width & Height: You can set your preferred width and height on the map by customizing it from the settings. This option allows you to set the displayed map at a certain height and width and then place it on the front end of your site. You can set it according to your viewing preference. ☸️ Latitude and Longitude Generator: You can generate addresses from the latitude and longitude of your location. With the help of latitude and longitude, you will get a precise location and address on the map. 📍Set any marker as the center position: You can set the marker in the central position on the map. If you have placed a custom marker on the map, you can set it as your default marker and set its position in the middle. This will show the marker as the main marker; it will be displayed at the center of the map. ☄️Marker Builder: You may be bored to see the same old marker icon on the map. WP Map Block allows you to customize the map beyond the traditional elements of the map. You can customize as well as build a new marker and place it on the map. 👋 Draggable Marker: Drag the marker in any position on the map and reveal the location swiftly. The dragging option is really smooth, and after dragging the marker, the location gets revealed instantly. 🔑 API key not required: To place the map on your site. Simply select the map block and place it on any page of your site. The vast majority of Google Map plugins now available on the market need the use of API keys in order to activate the map; however, our plugin does not. 🔥 WHAT’S NEXT If you like WP-Map-Block, then consider checking out our other WordPress Plugins for FREE: 🔝 Academy LMS – Academy LMS is a modern, lightweight LMS plugin for WordPress. It helps users create and sell online courses, manage instructors, track student progress, quizzes, and more — all inside WordPress. 🔝 StoreEngine – StoreEngine is an all-in-one, next-gen eCommerce plugin for WordPress. It’s designed to make selling digital products, courses, memberships, and even physical goods easier than ever. 💙 Join the WP Map Block Community Get help, share your maps and hear about new features first. Visit the WP Map Block website Read the documentation Get support
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C