MapPress – Google Maps, OpenStreetMap & Leaflet

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 39% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ badix

   6mo ago

   Great service

   Read on wp.org ↗
2. ★★★★★ fabiocannone

   1.6y ago

   I used it to place the Clubs of an organization in Italy. Easy to use and configure!

   Read on wp.org ↗
3. ★★★★★ robertoro

   2.3y ago

   I had a simple problem due only to my browser cache – the plugin itself was working fine.I had to clean my cache and that’s all.Chris helped me to fix the problem anyway, quick & great!Thanks

   Read on wp.org ↗
4. ★★★★★ mhipley

   2.3y ago

   I am currently using Mappress for a client project, and it was the best solution I could find to meet all of my client’s needs. Most importantly, the support from the Mappress team has been stellar and has saved me many hours of frustration.

   Read on wp.org ↗
5. ★★★★★ yantisa

   2.5y ago

   It is very easy to use with options to customize it further, very recommended

   Read on wp.org ↗
6. ★★★★★ lucky2deep

   2.6y ago

   The Plugin provides a map and custom fields. The support is helpful. Thanks

   Read on wp.org ↗
7. ★★★★★ Asif

   3.0y ago

   Version: 2.88 causing error after the update.WordPress message:“… WordPress caught an error with one of your plugins, MapPress Google Maps and Leaflet Maps…“ Had to disable and remove the plugin.

   Read on wp.org ↗
8. ★★★★★ guillaume

   3.5y ago

   I spent quiet a lot of time to look for a good maps plugin. I tried 5 or 6 diferent. I found MapPress Maps for WordPress the best. In its free version, you can do a lot. And if you want more, you can have a premium version with many more options. When I tried to use this plugin, I found an issue. I wrote to the founder, Chris. He answered me diferent times until he found THE solution. He was not forced to do it because I am a free user. But he did. And I do thank him. If you are looking for a great maps solutions, here is the best plugin.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.97.7 Added: dark theme for OFM maps Changed: improved reminders Changed: better tile service setup Changed: better prevention for Siteground Optimizer minification problems Fixed: ‘search’ and ‘filter’ buttons were not workin 2.97.7
2. — Version 2.97.6 Added: check that webGL is active Added: prevent optimizers like Siteground from re-minifying mablibre 2.97.6
3. — Version 2.97.5 Changed: limit query and filter nonce check for sites with caching plugins 2.97.5
4. — Version 2.97.4 Added: escape in iframe 2.97.4
5. — Version 2.97.3 Fixed: change in 2.97 caused mashup shortcodes to show all posts Changed: improved hierarchical taxonomy handling in filters 2.97.3
6. — Version 2.97.2 Fixed: invalid Nominatim geocoder with Google engine Fixed: wp-cli error prevented translation file generation Thanks to https://shovon.bd for security assistance in 2.97 2.97.2

17 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 MapPress – Google Maps, OpenStreetMap & Leaflet <= 2.97.6 - Unauthenticated Information Exposure ↗
   2026-07-24 CVE-2026-65564 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.97.6 Patched in 2.97.7
2. High · 7.2 MapPress Maps for WordPress <= 2.97.3 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-06-19 CVE-2026-56011 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.97.3 Patched in 2.97.4
3. Medium · 5.3 MapPress Maps for WordPress <= 2.96.6 - Unauthenticated Insecure Direct Object Reference via REST API Endpoints ↗
   2026-06-05 CVE-2026-8839 Authorization Bypass Through User-Controlled Key Affects <= 2.96.6 Patched in 2.97.1
4. Medium · 4.4 MapPress Maps for WordPress <= 2.94.9 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2025-03-27 CVE-2025-2162 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.94.9 Patched in 2.94.10
5. Medium · 6.4 MapPress Maps for WordPress <= 2.94.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-03-13 CVE-2025-2055 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.94.8 Patched in 2.94.9
6. Medium · 6.4 MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block ↗
   2024-11-05 CVE-2024-10715 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.94.1 Patched in 2.94.2
7. Medium · 4.4 MapPress Maps for WordPress <= 2.92.2 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2024-09-24 CVE-2024-8620 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.92.2 Patched in 2.93
8. Medium · 6.4 MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settings ↗
   2024-01-29 CVE-2023-7225 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.88.16 Patched in 2.88.17
9. Medium · 6.4 MapPress Maps for WordPress <= 2.88.14 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-01-17 CVE-2024-0420 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.88.14 Patched in 2.88.15
10. Medium · 5.3 MapPress Maps for WordPress <= 2.88.15 - Insufficient Authorization to Information Disclosure ↗
    2024-01-17 CVE-2024-0421 Missing Authorization Affects <= 2.88.15 Patched in 2.88.16
11. Medium · 6.4 MapPress Maps for WordPress <= 2.88.13 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-01-02 CVE-2023-6524 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.88.13 Patched in 2.88.14
12. Medium · 6.4 MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2023-09-11 CVE-2023-4840 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.88.4 Patched in 2.88.5
13. High · 8.8 MapPress Maps for WordPress <= 2.85.4 - Authenticated (Contributor+) SQL Injection via get_maps ↗
    2023-04-06 CVE-2023-26015 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.85.4 Patched in 2.85.5
14. Medium · 6.0 MapPress Maps for WordPress <= 2.73.12 - Admin+ File Upload to Remote Code Execution ↗
    2022-03-14 CVE-2022-0537 Unrestricted Upload of File with Dangerous Type Affects < 2.73.13 Patched in 2.73.13
15. Medium · 6.1 MapPress Maps <= 2.73.3 - Reflected Cross-Site Scripting ↗
    2022-01-17 CVE-2022-0208 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.73.4 Patched in 2.73.4
16. High · 8.8 MapPress Maps <= 2.54.5 - Remote Code Execution via Improper Capability Checks in AJAX Calls ↗
    2020-05-28 CVE-2020-12675 Unrestricted Upload of File with Dangerous Type Affects <= 2.54.5 Patched in 2.54.6
17. Medium · 6.5 MapPress Maps for WordPress <=2.53.8 - Authenticated Map Creation/Deletion to Stored Cross-Site Scripting & Remote Code Execution ↗
    2020-04-01 CVE-2020-12077 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.53.9 Patched in 2.53.9

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 61 languages, 1 at 90% or more

Plus 37 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-01-31 40K+ → 30K+ down after 569 days in tier
2. 2024-07-11 50K+ → 40K+ down after 498 days in tier
3. 2023-03-01 60K+ → 50K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Open User Map – Interactive Leaflet Maps 10K+ installs · 4.8★ · 3 shared tags A
• Out of the Block: OpenStreetMap 700+ installs · 4.1★ · 3 shared tags B
• Easy Map- Store Locator Plugin for WordPress (No API Key Required) 70+ installs · 4.0★ · 3 shared tags B
• S Slick Google Map 50+ installs · 4.1★ · 3 shared tags A
• WP Go Maps – Google Map, OpenStreetMap, Leaflet Map 300K+ installs · 4.8★ · 2 shared tags A
• WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters 60K+ installs · 4.2★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for MapPress – Google Maps, OpenStreetMap & Leaflet into a readme, a review or a deck. It updates itself.

MapPress – Google Maps, OpenStreetMap & Leaflet: 30K+ active installs, 4.7★ (147 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/mappress-google-maps-for-wordpress