WP MapIt

WP MapIt has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, one record each. WP MapIt is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all WP MapIt vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2026-22466

MapIt <= 3.0.3 - Missing Authorization

Read the full analysis

Vulnerability Records

2 records


2026-01-04 00:00	MapIt <= 3.0.3 - Missing Authorization WP MapIt <= 3.0.3	`CVE-2026-22466`	4.3 Medium	Nabil Irawan	No
2023-11-06 00:00	WP MapIt <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode WP MapIt <= 2.7.1	`CVE-2023-5658`	6.4 Medium	István Márton	Yes

Showing 1–2 of 2 reports

Latestv3.1.1

WP MapIt

Author

Chandni Patel

4.7(11)

94/100

Last Updated

2026-05-12 (4mo ago)

Active Installs

2,000+

Downloads

29,022

Requires WP

4.2+

Requires PHP

5.4+

Tested up to

WP 6.9.7

Created

2019-03-28 (8y ago)

Easy to use, WordPress Map plugin based on Open Street Map and Leaflet with custom markers images, descriptions and links. Add maps to your WordPress pages, posts and custom post types quickly and easily. Display map automatically before or after content, or place the map within the page content using gutenberg block, shortcode or widget. Choose your own images to display as markers. Decide what happens on marker click, display a popup or open a link. Free Version Display Open Street Maps using Leaflet on your WordPress. Super easy to use, no coding required. No API keys required to display maps on your WordPress website. Interactive map preview. Search a location to add pin. Preview all the changes on the fly in admin panel. Click map to add page markers. Drag markers to the exact location. Use custom images as map pins to give your map a personalized touch. Define your height and width and zoom level for the map. Decide what happens on marker click. Open a popup or redirect to a URL. Add maps to custom post types. Responsive maps. Display multiple maps on a single page. Display map in the sidebar. Gutenberg blocks to display map within the content. Map widget functionality. Shortcode functionality. Maps with multiple Marker. Hooks and filters. Fullscreen view. CSV import for multipin map. Note: Grayscale is not supported in IE apart from IE Edge. Demos Map before content. Map after content. Map within content. Map in the sidebar. Map with multiple pins. Hooks & Filters. Documentation Installing WP MapIt plugin. Setting up the plugin. Displaying map on the page. Creating a multipin map. Credits Leaflet Open Street Maps Yet Another Fred elmarquis Veith Schoergenhummer Mapbox – Fullscreen control

View on WordPress.org