Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-25600: WP Google Map Plugin

Cross-Site Request Forgery (CSRF) vulnerability affecting Delete Marker Category, Delete Map, and Copy Map functions in WP Google Map plugin (versions <= 4.2.3).

CVE
#sql#xss#csrf#vulnerability#web#google#js#git
  • Details
  • Reviews
  • Installation
  • Support
  • Development

This google maps plugin allows you to create google maps shortcodes to display responsive google maps on pages, widgets and custom templates. Show custom markers on each google maps and display messages inside infowindow on marker click.

Watch Video

Google autosuggest enabled location form helps you to create unlimited markers and then assign markers to a google map. It’s super easy.

Here is a quick highlight on the numerous customizable features offered by the free and pro versions of the WP Google Map Pro Version.

Lite Version (Free)

  • Add unlimited locations with various information.
  • Assign multiple locations to a single map.
  • Display a info window message to any location.
  • Map Marker Infowindow Open On: Mouse Click or Mouse Hover.
  • Display map on posts/pages using shortcode.
  • Decide center latitude and longitude for each map separtely.
  • Easy way to assign category to any location.
  • Select your marker icon for markers.
  • Easily edit or delete map functionality.
  • Assign your own markers to categories or choose colorful markers from +500 readymade markers provided by the Maps Icons Collection.
  • Select among 4 map type : Roadmap,Satellite,Hybrid,Terrain
  • Set your map height and width.
  • Set Map zoom level.
  • Map can be Draggable
  • Display traffic real time conditions and overlays using Layers.
  • Add bicycle path information to your maps using the Bicycling Layer.
  • Enable Map Transit layer
  • Marker Animation on Click or Mouse hover the marker.
  • 45° imagery functionality
  • Add circle in your Maps plugin
  • Create a map just in seconds.
  • Street view supported
  • widget supportive : Display Google Maps on sidebars using widget.
  • Pov Heading and Pov Pitch for street view.
  • Fully Responsive.Display your map perfectly on all devices.
  • Create 100% responsive maps effortlessly.Tested on real devices.
  • A Cross Browser Compatible plugin. Fully tested on IE8, IE9, IE10 and all major browsers
  • Multi-lingual Supported.
  • Multisite Enabled and ability to activate it network wide.
  • Map Stylization : Customizable Google maps style from https://snazzymaps.com.
  • Search control on frontend map to search location easily.
  • Filter markers by category.

Features available in Pro version

[WP Google Map Pro] (https://codecanyon.net/item/advanced-google-maps-plugin-for-wordpress/5211638) offers awesome features such as

  • Marker Clustering : Enable marker clusters if you have too many locations.
  • Map Layers : Display Traffic Layer , Bicycling Layer, Transit layer
  • Import/Export Locations : Import Export Locations supported using CSV.Sample csv is attached in pro version.
  • Draw shapes : rectangle, circle, polygon and polyline.
  • Display unlimited shapes. Display Message on shape click or Redirect to external link.
  • Direction & Route : Directions & Route Suggestion. Display directions results in KM and MILES.
  • Listing : Display listing in grid or list style. Fully responsive.
  • Sort listing by location, category and address alphabetically in location listing.
  • Marker Category : Assign multiple categories to a location.
  • Infowindow Contents: Customize infowindow contents with help of Placeholders.
  • Display Posts Information, custom fields, taxonomies and featured images on infowindow message using placeholders.
  • Unlimited number of map markers and locations.
  • Set your own google map marker icon
  • Drag and drop feature for markers, custom animation support
  • Allows to display the user location on map.
  • Nearby locations based on user’s current location.
  • Display Posts/Pages or Custom Post Types on google maps using custom fields.
  • Center the map based on visitor’s current location.
  • Define overlays on Google maps via an easy to use interface.
  • Integrate GEOJSON in to google maps.
  • Display multiple Kml/Kmz Layer on the map.
  • Fusion Table Layers.
  • Add Geo location
  • Add any number of Google maps on pages/posts/sidebars.
  • Allows to insert the map as widget on sidebars.
  • Add unlimited locations using an easy to use interface for Google Maps.
  • Display location title, location category, location latitude, location longitude with location message in the infowindow.
  • Create unlimited maps and display on posts/pages using shortcode or in sidebar using widget.
  • Design your own Google map skins easily. Turn ON/OFF roads, places, water area.
  • Ability to display infowindow on mouse click on mouse hover.
  • Display your map perfectly on all devices. Create 100% responsive maps effortlessly.
  • Multi-lingual Supported.
  • Display physical maps based on terrain information.
  • Display Google Earth satellite images on just one click.
  • Display maps in a blend of normal and satellite views.
  • Setup POV Heading and POV Pitch of Street View to customize Street View output of a location.
  • Full support of controls of the Google map, such as zoom control, map type control, scale control, street view control, fullscreen and rotate control
  • Drag and drop feature for markers, custom animation support
  • Modify Locating Listing using Placeholder.
  • Hooks Supported – Use actions & filters to modify map,markers,listing and associated html on fly.
  • Display locations listing with filters & pagination. Fully customizable using backend settings and hooks.
  • Use “wpgmp_geo_tags_args”, “wpgmp_geo_featured_image”, “wpgmp_geotags_placeholder”, “wpgmp_geotags_content” hooks to extend Posts on google maps functionality as you want.
  • Use External Database or Sources to add markers on google maps using new filter wpgmp_marker_source.
  • Load markers from external database or API sources with help of filters (Hooks).
  • A Cross Browser Compatible plugin. Fully tested on IE8, IE9, IE10 and all major browsers
  • Multisite Enabled and ability to activate it network wide.
  • Visit our Pro Edition WP Google Map

Live Examples

  • Google Maps Pro Plugin Live Demo

Links

Available on Codecanyon |
Live Examples |
Developed by flippercode

This section describes how to install the plugin and get it working.

1.  Upload the <strong>wp-google-map-plugin</strong> directory to the <strong>/wp-content/plugins/</strong> folder

2.  Once the plugin is uploaded log into WordPress and go to <strong>Plugins</strong>

3.  Find the <strong>wp-google-map-plugin</strong>plugin and click Activate Plugin

=How to work=

1. Go to <strong>settings</strong> page of plugin and insert your google maps api key. see full instruction [How to create Api key](https://www.wpmapspro.com/docs/how-to-create-an-api-key/)

2. First create your locations using 'Add Location' page.

3. Then create your first map using 'Add Map' page and assign your locations.

4. Each map is assoicated to a shortcode. You can view shortcode on 'Manage Maps' and copy and paste it on your pages or posts. You can display your google maps in the sidebar using widget.

Can I create a custom marker ?

Yes, you can upload your own marker image or you can choose from readymade icons.

Do I need to calculate latitude & longitude myself ?

No, Address field is google autosuggest enabled so you just start typing and choose your address. Latitude & Longitude will be calculated automatically.

How many locations I can assign to the map?

You can assign as many as location you want to display on google maps.

How to display map on page?

Go to ‘Manage Maps’ and copy the shortcode for your map. Each map will have own shortcode. You just paste that on your page.

Can I display map using widget?

Yes, First create your map and then you can display your map in sidebar from widget section.

How to register google maps api key?

Go to [Google Maps API console]
(https://console.developers.google.com/flows/enableapi?apiid=maps_backend,geocoding_backend,directions_backend,distance_matrix_backend,elevation_backend,places_backend&keyType=CLIENT_SIDE&reusekey=true&pli=1)
and you can create your google maps api key here.

We have a guide [Important Changes in Google Maps]
(https://console.developers.google.com/flows/enableapi?apiid=maps_backend,geocoding_backend,directions_backend,distance_matrix_backend,elevation_backend,places_backend&keyType=CLIENT_SIDE&reusekey=true)

For troubleshooting releated to [Google Maps Api Key]
(https://www.linkedin.com/pulse/important-changes-google-maps-api-v3-website-owners-sandeep-kumar)

How to upgrade to pro version?

You can purchase Google Maps Pro Version and then just keep your lite version deactivated and then activate the pro version. You’ll not loss any of your data. Your all data will be migrated to pro version automatically.

Do we have Live Demo?

Yes, You can click on Google Maps Pro Live Demo and mail us at hello at flippercode dot com if any pre-purchase query.

Do we have a Documentation?

Yes, You can click on WP Google Map Pro Guide and you will get all documentation with proper steps and video tutorials.

Do we have offer refund?

Yes, You can get refund any time if pro version is not suitable for you.

Do we have offer customization?

Yes, You can mail us your requirement at hello at flippercode dot com.

The support team was very fast and fixed my problem - even with just the free Plan Also very good Plugin and easy to use!

HI, Special thanks to Sandeep Kumar (Founder, Flipper Code Private Limited) really very help full He sorted plugin conflict on my site in very short time. I am very happy with plugin support.

Matthew Lau responded with answers to my support questions quickly and was very friendly, clear and concise. Thank you Matthew! ~Betty

Flippercode helped me implement what I was looking for. Their plugin customization was extremely affordable and their responses were super fast! The plugin itself is extremely user friendly too. We will definitely be purchasing from them again for our other sites!

Read all 107 reviews

“WP Google Map Plugin” is open source software. The following people have contributed to this plugin.

Contributors

  • Flipper Code

4.2.5

  • Fix : Infowindow HTML tags were stripping while updating the map.

4.2.4

  • Fix : Confirmation popup added on bulk delete action for category,location and map.
  • Fix : Security issue fixed for delete and copy map operation.

4.2.3

  • Fix : ‘Select Category’ text displayed in marker category filter dropdown is now translatable.
  • Fix : Fixed a logical validation issue on Add location form in back-end.

4.2.2

  • Fix : UI issues of map controls caused by currently activated theme fixed.

4.2.1

  • Fix : Warnings removed from frontend when map is deleted from backend.

4.2.0

  • New : Confirmation boxes added before deleting locations / marker categories / maps.
  • New : Addons introduction page updated.

4.1.9

  • Fix : One warning and one notice fixed on add map page, code optimised.

4.1.8

  • New : Dismissable notice to buy premium version plugin added.

4.1.7

  • New : Better UI interface for backend forms.

4.1.6

  • Fix: Calling files remotely fixed. Removed shorthand URLs. Text domain corrected. WordPress tested upto version number updated. Data sanitisation & escaping work done. Unused code removed. Design issue fixed on manage location and manage maps page. New filter added.

4.1.5

  • Fix: SQL vulnerability issue fixed.

4.1.4

  • Fix: SQL security issue fixed.

4.1.3

  • New: New hooks added before and after map rendering.
  • New: Extentions related information provided.

4.1.2

  • Fix: Missing translation files added.

4.1.1

  • New: Search control on map for easy location searching.
  • New: Filter markers by category.

4.1.0

  • Fix: Removed reported vulnerability. Updated code in data save modules and applied more security.
  • New: Display google maps in different beautiful skins. Snazzy maps support integrated.

4.0.9

  • Fix: Removed PHP Warnings and coding standard updated.

4.0.8

  • Fix: Broken link fixed.

4.0.7

  • Fix: Optimized CSS and removed unused CSS, Files and Code.

4.0.6

  • Fix: Optimized CSS and removed unused CSS, Files and Code.

4.0.3

  • Fix: Removed unused file.

4.0.2

  • Fix: call_user_func_array is resolved.

4.0.1

  • Fix: Blank Page on Add Map is fixed.

4.0.0

  • Improvement: New UI for Backend Pages and Forms.
  • New: Ability to customize info window message using placeholder.
  • New: Ability to show info window on click or mouseover.
  • New: Set default marker icon for the map.

3.2.0

  • Security Fix: Security vulnerablity is resolved.

3.1.6

  • Improvement Fix: How to use plugin instruction added.

3.1.5

  • Improvement Fix: CSS fixed for wordpress 4.6.

3.1.4

  • Improvement Fix: Missing google maps api key notification added on location page.

3.1.3

  • Fix: Indexed Warning is resolved in class.initial-core.php.

3.1.2

  • Fix: XSS Vulnerability is resolved.

3.1.1

  • Fix – Access level to WP_List_Table_Helper::pagination() must be public.

3.1.0

  • New – resize_map() function is added to correct the grey map in tabs issue.
  • Improvement – Remove directory reading functions.

3.0.9

  • Multi-site bug resolved.

3.0.5

  • Lang slug changed to wp-google-map-plugin as per wordpress.org requested.

3.0.4

  • links in the info window is broken due to missing stripslashes function – resolved.

3.0.3

  • wpgmp_admin_overview capability added to read how to use instructions.

3.0.2

  • echo $before_widget and $after_widget added for correct widget output.

3.0.1

  • Category icon broken issue resolved.
  • Markers are not displaying on the map, issue resolved.
  • Infowindow Message is not showing on marker click, issue resolved.

3.0.0

  • Sanitize all inputs and outputs.
  • New file & folder structure.
  • Object oriented based coding according to wordpress standard coding rules.
  • Clean bootstrap based design.
  • Ability to show any number of google maps on a single map.
  • Decide center latitude and longitude for each map.
  • POV Heading and Pov Pitch for street view.
  • Sub categories supported.
  • Redirect to URL on marker click.
  • City, State, Country and Postal code new fields in location form.
  • Apply marker animation.
  • Position google maps controls e.g Pan,Zoom,May Type with easy to use interface.

2.3.10

  • CSRF Protection added on add/edit location.
  • CSRF Protection added on add/edit map.
  • CSRF Protection added on add/edit category.

2.3.9

  • Display more than 10 locations on Manage Locations using Screen Options.
  • Display more than 10 maps on Manage Categories using Screen Options.
  • Display more than 10 categories on Manage Maps using Screen Options.
  • SSL Supported.

2.3.8

  • locations, maps and category was not showing on manage pages in wordpress 4.2 resolved.

2.3.7

  • Improvement Fix: Fixed add_query_arg() and remove_query_arg() usage to avoid XSS Vulnerability.

2.2.0

  • Twitter Bootstrap 3 Based.
  • Solved Featured Image Problem.

2.1.0

  • Infowindow CSS Improved.
  • Optimized Code for Fast Map Experience.
  • Solved Layer Display Problem.

1.2.0

  • Zero Configuration Enabled.
  • Managed Navigation.
  • Custom Icon using Widget.

1.1.0

  • Solved zoom toolbar bug.
  • Solved white lines on the map.
  • Added Widget Support.
  • Added multiple maps on a page support.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907