Plugin Pulse Beta
← Pulse

Geo Mashup

by Dylan Kuhn · Uncategorized

Also makes 1 other plugin · 1K+ installs across the portfolio →

Try it live ↗ wp.org ↗

Include Google and OpenStreetMap maps in posts and pages, and map posts, pages, and other objects on global maps. Make WordPress into a GeoCMS.

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

Health

A 86/100

no flags

Active installs

1K+

≈1.5K estimated

Momentum

+96%

downloads vs prior 30d

Biggest opportunity: Swap “google maps”, “maps” and “mapping” for “openlayers”, “geocoding” and “kml”. “google maps” isn't earning its slot: you're not in the first 24 results for its own search. “openlayers” sits at #6 untagged, close enough for a declared tag to move it up. “maps” isn't earning its slot: you're not in the first 24 results for its own search. “geocoding” sits at #9 untagged, close enough for a declared tag to move it up. “mapping” isn't earning its slot: it only gets you to #24. “kml” sits at #15 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.

See the detail → Get the free audit
How scoring works →
86 Health · A
Maintenance 100/100
Rating quality 88/100
Support 70/100
Security 75/100

86 health vs 58 average across 25,734 Uncategorized plugins

1K+

Active installs

≈1.5K estimated

255.6K

Total downloads

since 2005 · 0.4% still active

4.5/5

Rating

4.7 on wp.org · 33 reviews

+96%

1.2K

Downloads · 30d

category median +7%

Install conversion

How it's measured →

0.4%

of downloads still active

At least 1K of 255.6K lifetime downloads are still running, below its category: the median Uncategorized plugin keeps 0.6%, across 17,766 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Uncategorized plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 7 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Ratings · 33 reviews

Read on wp.org ↗
5★
30 4★
0 3★
0 2★
1 1★
2

Details

Version
1.13.23
Last updated
1mo ago
Added
2005-11-15 · 20 yrs old
Requires WP
3.7
Tested up to
7.1.4
Requires PHP
—
Changelog ↗Support forum ↗Reviews ↗Advanced stats ↗

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

97 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100

Updated 41 days ago

WP compatibility 100/100

Tested up to WordPress 7.1.4, the current branch or newer

Rating quality 87/100

4.7★ over 33 reviews, smoothed to 4.34★

Listing tuning 100/100

5 of 5 tags set · short description in place

Daily downloads

Since 5 Oct 2022 · 1,488 days · wp.org + Plugin Pulse archive

+96% vs prior 30d
3531 Oct 2026

30-day downloads

Rolling 30-day volume · peak 3K · peaks are release surges

1.2K31 Oct 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Geo Mashup · #5173youMap My Posts · #13182Nokia Maps & Places · #38039WP Go Maps · #197

Rating trend

Star average over time · dips mark rough releases

4.731 Oct 2026

Health trend

Composite health score, snapshotted daily

8631 Oct 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

1.2K31 Oct 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

7

releases in the last 12 months

1mo ago

latest release · v1.13.23 · 20 Sep 2026

87

tagged releases on record

Recent releases

1.13.23 · 20 Sep 20261.13.22 · 15 Sep 20261.13.21 · 3 May 20261.13.20 · 30 Apr 20261.13.19 · 10 Apr 20261.13.18 · 15 Feb 20261.13.16 · 15 Feb 20261.13.17 · 22 Apr 20251.13.15 · 11 Nov 20241.13.14 · 30 Sep 20241.13.13 · 14 Sep 20241.13.12 · 14 Jul 20231.13.11 · 30 Mar 20231.13.10 · 10 Oct 2022

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 83% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v1.13 83%
v1.8 6%
Older / other versions 11%

Estimated active installs

The public count shows “1K+”. Our estimate pins where the real number sits.

tracked estimate
1K–2K ≈1.5K

Crossed into this band 6 months ago; a band this size takes about a year or more to cross, which places it about 50% of the way through.

Install history since 28 Mar 2016

1K31 Oct 2026

Security history

via Wordfence Intelligence

All 24 disclosed vulnerabilities are patched in the current version (1.13.23). Sites still on an older version should update.

  1. Patched Medium · 6.4 Geo Mashup <= 1.13.22 - Authenticated (Author+) Stored Cross-Site Scripting ↗
    2026-10-26 CVE-2026-115953 Improper Neutralization of Input During Web Page Generation Affects <= 1.13.22 Patched in 1.13.23
  2. Patched Medium · 4.3 Geo Mashup <= 1.13.22 - Missing Authorization ↗
    2026-10-26 CVE-2026-115954 Missing Authorization Affects <= 1.13.22 Patched in 1.13.23
  3. Patched Medium · 6.1 Geo Mashup <= 1.13.22 - Reflected Cross-Site Scripting ↗
    2026-10-19 CVE-2026-111848 Improper Neutralization of Input During Web Page Generation Affects <= 1.13.22 Patched in 1.13.23
  4. Patched High · 7.2 Geo Mashup <= 1.13.21 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-09-29 CVE-2026-97250 Improper Neutralization of Input During Web Page Generation Affects <= 1.13.21 Patched in 1.13.22
  5. Patched Medium · 6.4 Geo Mashup <= 1.13.21 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-09-16 CVE-2026-78294 Improper Neutralization of Input During Web Page Generation Affects <= 1.13.21 Patched in 1.13.22
  6. Patched High · 7.2 Geo Mashup <= 1.13.18 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-08-07 CVE-2026-66449 Improper Neutralization of Input During Web Page Generation Affects <= 1.13.18 Patched in 1.13.19
  7. Patched High · 8.1 Geo Mashup <= 1.13.18 - Unauthenticated Local File Inclusion ↗
    2026-08-07 CVE-2026-66450 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 1.13.18 Patched in 1.13.19
  8. Patched Medium · 6.5 Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection ↗
    2026-06-03 CVE-2026-48967 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.13.19 Patched in 1.13.20
  9. Patched Medium · 5.3 Geo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' Parameter ↗
    2026-05-27 CVE-2026-7552 Missing Authorization Affects <= 1.13.19 Patched in 1.13.20
  10. Patched High · 7.2 Geo Mashup <= 1.13.19 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-05-26 CVE-2026-42734 Improper Neutralization of Input During Web Page Generation Affects <= 1.13.19 Patched in 1.13.20
  11. Patched Medium · 6.4 Geo Mashup <= 1.13.18 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-05-26 CVE-2026-27427 Improper Neutralization of Input During Web Page Generation Affects <= 1.13.18 Patched in 1.13.19
  12. Patched Medium · 6.5 Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter ↗
    2026-05-01 CVE-2026-6457 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.13.19 Patched in 1.13.20
  13. Patched High · 7.5 Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' Parameter ↗
    2026-05-01 CVE-2026-4060 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.13.18 Patched in 1.13.19
  14. Patched High · 7.5 Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter ↗
    2026-05-01 CVE-2026-4062 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.13.18 Patched in 1.13.19
  15. Patched High · 7.5 Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter ↗
    2026-05-01 CVE-2026-4061 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.13.18 Patched in 1.13.19
  16. Patched Medium · 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter ↗
    2026-04-30 CVE-2024-13362 Improper Neutralization of Input During Web Page Generation Affects <= 1.13.15 Patched in 1.13.16
  17. Patched High · 7.5 Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter ↗
    2026-02-24 CVE-2026-2416 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.13.17 Patched in 1.13.18
  18. Patched High · 8.1 Geo Mashup <= 1.13.16 - Unauthenticated Local File Inclusion ↗
    2025-07-25 CVE-2025-48293 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 1.13.16 Patched in 1.13.17
  19. Patched Medium · 6.4 Geo Mashup <= 1.13.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via geo_mashup_visible_posts_list Shortcode ↗
    2024-09-30 CVE-2024-8990 Improper Neutralization of Input During Web Page Generation Affects <= 1.13.13 Patched in 1.13.14
  20. Patched Medium · 6.5 Geo Mashup <= 1.13.12 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-09-16 CVE-2024-44008 Improper Neutralization of Input During Web Page Generation Affects <= 1.13.12 Patched in 1.13.13
  21. Patched Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation Affects 1.9.1 - 1.13.11 Patched in 1.13.12
  22. Patched Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 1.13.6 Patched in 1.13.6
  23. Patched Medium · 6.4 Geo Mashup - < 1.10.4 - Cross-Site Scripting ↗
    2018-07-16 CVE-2018-14071 Improper Neutralization of Input During Web Page Generation Affects < 1.10.4 Patched in 1.10.4
  24. Patched Medium · 6.1 Geo Mashup < 1.8.3 - Cross-Site Scripting ↗
    2015-01-27 CVE-2015-1383 Improper Neutralization of Input During Web Page Generation Affects < 1.8.3 Patched in 1.8.3

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

✓ Low memory footprint
✓ Low page-speed impact
✕ Runs on latest PHP + WP
✕ No PHP errors
✓ No JS errors
✓ Activates cleanly
✓ No resource errors
✓ No external HTTP errors
✓ Optimized database use
✕ Frequently updated

Languages

via translate.wordpress.org

Translated into 72 languages, 4 at 90% or more

Dutch 100%
Ukrainian 100%
German 98%
Italian 97%
Romanian 83%
Polish 76%
Portuguese (Portugal) 76%
Spanish (Spain) 76%
Russian 75%
Slovak 75%
Irish 73%
Japanese 67%
French (France) 63%
Gujarati 60%
English (UK) 36%
Belarusian 26%
English (Canada) 21%
Swedish 19%
English (Australia) 13%
Azerbaijani 8%
English (New Zealand) 8%
Finnish 8%
Cebuano 7%
Dutch (Formal) 7%

Plus 48 more locales with partial translations.

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Readme readiness

5 of 8 pass · checked 28 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ✓ Says what it does "Include Google and OpenStreetMap maps in posts and pages, and map posts, pages, and other objects on global..."
  • ! Has a FAQ No FAQ section.
  • ! FAQ asks real questions No FAQ to judge.
  • ! Names who it is for One audience phrase ("if you need"); say who the plugin is for and what they use it for.
  • ✓ Names what it works with Mentions Google Maps.
  • ✓ Headings and lists 3 headings and 3 lists.
  • ✓ Enough to quote 2,689 characters of description.
  • ✓ Tags match the text 4 of 5 tags appear in the text; "mapping" does not.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2026-04-20 2K+ → 1K+ down after 6 days in tier
  2. 2026-04-14 1K+ → 2K+ up after 12 days in tier
  3. 2026-04-02 2K+ → 1K+ down after 362 days in tier
  4. 2025-04-05 3K+ → 2K+ down after 22 days in tier
  5. 2025-03-14 4K+ → 3K+ down after 29 days in tier
  6. 2025-02-13 5K+ → 4K+ down after 24 days in tier
  7. 2025-01-20 6K+ → 5K+ down after 58 days in tier
  8. 2024-11-23 5K+ → 6K+ up after 28 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Geo Mashup into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/geo-mashup" width="480" height="300" style="border:0" loading="lazy" title="Geo Mashup — Plugin Pulse"></iframe>
Preview card ↗

Geo Mashup: 1K+ active installs, 4.7★ (33 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/geo-mashup

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.