Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2019-10692: WP Go Maps (formerly WP Google Maps)

In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement.

CVE
#sql#xss#web#ios#windows#google#js#git#java#wordpress#intel#php#perl#auth
  • Details
  • Reviews
  • Installation
  • Development

The easiest to use Google Maps and Open Layers Map Plugin (including a Map Block)!

Add a customized Google map, map block or Store Locator to your WordPress posts and/or pages quickly and easily with the supplied shortcode. No fuss. No iFrames and super easy to use! Perfect for contact page maps, routes, maps showing delivery areas and any other use you can think of!

While the free version of WP Go Maps allows you to create a Google map with as many markers as you like, the Pro version allows you to do so much more!

Create Elementor Maps, map blocks and map widgets easily with our WP Go Maps Elementor map block integration, straight out the box!

Do you use the classic editor? We still support map widgets for classic WordPress installations. No need to compromise, the map widget includes the same functionality as our map blocks!

The WP Go Maps Pro Version version allows you create custom Google maps with high quality markers containing locations, descriptions, images, categories, links and directions.

Lite Version (Free)

  • The most popular Google Maps plugin on WordPress
  • Choose between Google Maps or Open Layers Maps
  • Super easy to use, no coding required!
  • Create as many map markers as you need by simply typing in the address
  • Responsive maps
  • Elementor Map block
  • Edit your map markers with the click of a button
  • 9 popular map themes to choose from
  • Create or add your own map theme
  • Drag map markers to an exact location
  • Add a map block to your page
  • Google Maps Streetview supported
  • UTF-8 character support
  • Map widget functionality
  • Full screen map functionality
  • Support for localization
  • Choose from four Google maps types: roadmap, terrain, satellite and hybrid
  • Define your own width, height and zoom level for your map
  • Add animations to your map markers!
  • Store locator functionality
  • Restrict a store locator search by country
  • Add Polygons to your Map
  • Add Polylines / Routes to your map
  • Create a map in less than a 30 seconds!
  • Right click to add a marker to your map
  • No advertising or links
  • Google Maps Autocomplete
  • Google Maps Transport Layer
  • Set the max zoom level for your map
  • Serve your map marker data via your database or an XML file
  • Compatible with caching plugins
  • Compatible with Cloudfare
  • Latest Google Maps API
  • Latest OpenLayers API

Professional Edition

  • Create multiple maps!
  • Allow your visitors to get directions to your markers.
  • Add descriptions, links and images to your map markers.
  • Add categories to your map markers
  • Filter markers by category
  • Mashup multiple maps
  • Add different marker icons, or your own icons to make your map really stand out!
  • List your map markers in the four ways; basic list, basic table, carousel, advanced table
  • Allow visitors to use their map location as the starting or ending point for the directions
  • Choose between the Default Google Maps Infowindow and the new Modern Infowindow
  • Export/Import your markers to a CSV file for quick editing.
  • Link Fusion tables to your Google Maps
  • Show your visitor’s location on the Map
  • Import KML/KMZ files to your map
  • More advanced options for the Store Locator
  • Allow users to use their map location for the store locator
  • Store locator search by category
  • Hide all map markers until a store locator search is done
  • Move your marker list inside the map window
  • Multiple map widget functionality
  • Add retina-ready map marker icons
  • WordPress Network friendly
  • Get the WP Go Maps Professional Edition for only $39.99

Translations

Get a free copy of the WP Go Maps Pro version in exchange for translating our plugin!

  • English – default
  • Russian (Alexandra Bondareva)
  • German
  • French (Arnaud Thomas)
  • Polish (Michal Kotnowski)
  • Finnish (Johanna Joutti)
  • Dutch (Jan Wind)
  • Hebrew (Gal Dotan)
  • Danish (Patrick Jepsen)
  • Italian (Tommaso Mori & Massimo Bregani)
  • Croatian (Sven Kopun)
  • Greek (Konstantinos Koukoulakis)
  • Romanian (Cosmin Stroe)
  • Spanish (Carmelo Villegas Cruz)
  • Portuguese (Jose Antonio Ribeiro)
  • Brazilian Portuguese (Roberto Costa)
  • Turkish (Suha Karalar)
  • Swedish (Martin Sleipner)
  • Bulgarian (Lyubomir Kolev)
  • Indonesian (Neno)
  • Lithuanian
  • Czechoslovakian^

^Language file needs to be updated

Demos

WP Go Maps Lite

  • Basic Google Map with Markers
  • Store Locator
  • Polygons & Polyines/Routes
  • Google Maps Transit Layer
  • Google Maps Traffic Layer
  • Google Maps Bicycle Layer

WP Go Maps Pro

  • Google map with advanced markers
  • Marker listings – Simple
  • Marker listings – Advanced
  • Google Maps Directions
  • Responsive Map
  • Marker Categories (Filtering)
  • Advanced Store Locator
  • WP Go Maps Editor (Back-end Screenshots)
  • Visitor Generated Markers – (WP Go Maps VGM Add-on)
  • Custom Map Styling (WP Go Maps Gold Add-on)

Documentation

  • Installing WP Go Maps
  • Creating your first map
  • Google Maps mashup (Pro)
  • Exporting and importing map markers (Pro)
  • Changing the Google Maps language
  • Create a google map and marker using custom fields (Pro)
  • View all documentation

Troubleshooting

  • My Google Map is not showing on my website
  • My markers are not showing
  • View all troubleshooting articles

This plugin provides 1 block.

  • WP Go Maps (formerly WP Google Maps)

First time WP Go Maps user

Thank you for choosing WP Go Maps! In order to create your Google map, simply activate the plugin and click on “Maps” in your left navigation menu.
Once the WP Go Maps page loads, set the options for your map (height, width, map type, zoom level etc) and then use your mouse to drag your Google map to your desired location and press the “Save map” button.
Copy and paste the shortcode into your post or page and WP Go Maps will automatically create the map on your page using the settings you chose above.

Adding your first map marker

To add a marker to your Google map, scroll to below the map in your admin section and enter the address or GPS location in the Address input field. Click “Add Marker” and WP Go Maps will add your marker to the address you specified.

Setting up a Google Maps Store Locator

In order to make use of WP Go Maps Store Locator functionality, simply click on the “Store Locator” tab in the map creation page and select “Yes”

How do I get WP Go Maps Pro?

Simply visit https://www.wpgmaps.com and purchase the WP Go Maps Professional Edition for $39.99 once off. Free updates and support included forever.

I’ve installed the plugin, now what?

Once installed and activated, a link should appear in your left navigation panel within your WP-ADMIN section. Click on the “WP Go Maps” link and follow the on screen instructions.

How do I put a Google map on my page/post?

In order to show your custom Google map on your page or post, simply copy the shortcode supplied and paste it into your page or post. WP Go Maps will automatically configure the map to the settings you selected in the map edit page.

How do I add a map widget to my widget area?

To add your map to your widgets area, simply go to Appearance->Widgets and drag the “WP Go Maps” Map Widget to your sidebar. You then edit the map widget to reflect the correct map.

As a long time user of the WP Go Maps plugin I’ve needed support multiple times on user error issues as simple as forgetting my login or having trouble downloading a link. Every time, support has been fast and helpful. Most recently Glen and Nick provided me with lots of back and forth emails and as I worked on updating my plugins. So thankful for them and I’ll continue being a happy customer of the plugin. Shelly Summer - Midwest Captions, Inc. Web Design & Hosting

Easy to use and has excellent support.

Hi, While debugging a Google Maps API key issue, I broke the pro-version of WP GO Maps. I contacted support and immediately rcvd a detailed email from Dylan Auty on how to debug the issue. I am a nube WP Go Maps mapper, and Dylan was very patient and supportive while he addressed all of my questions and provided helpful debug tips. I think he went above and beyond to make sure I was successful. Two thumbs up! 🙂 Best, John Vogel

Super efficient response in invoice support.

I have used many plugins over the years for my business and this one has been a million times better than all others. The functionality is top notch and their support is almost instantaneous. Will gladly continue using this company/plugin for years to come!

I was in contact with Glen from the Support-Team. Very fast replies, very helpful and nice.I would definitely recommend 🙂

Read all 2,691 reviews

“WP Go Maps (formerly WP Google Maps)” is open source software. The following people have contributed to this plugin.

Contributors

9.0.19 – 2023-04-28

  • Fixed issue where default Google Maps theme may cause initialization issues, preventing the map from loading all markers
  • Fixed issue where default theme JSON was in a no longer supported format, selecting this theme would cause parsing issues

9.0.18 – 2023-03-15

  • Added filter to prevent welcome page activation hook (wpgmza-plugin-core-prevent-welcome-redirect)
  • Improved delayed/async/defer (lazy) script loading substantially, by introducing ‘delayedReloader’ which will gracefully reinitialize plugin core as needed. Tested with LS Cache, Async JS, and Flying Scripts
  • Improved XML path filters to better support UNIX file systems
  • Fixed issue where Google Maps API key was localized in a settings object, causing Google to email account owner about a potential exposed key. We now obscure this, as it is safe to have localized, but caused falsed positive when page was crawled.
  • Fixed issue where Google Maps API would report a callback being required. This is a new requirement from Google, which we now adhere to
  • Fixed issue where OpenLayers maps would not scroll the page when greedy gestures are disabled, now inline with Google Maps implementation
  • Fixed issue where Pro disabled marker fields would be editable when in edit mode, although not stored, confusing to the end user
  • Updated spotlight icon from Google

9.0.17 – 2023-01-11

  • Improved XML directory pathing system, and introduced a new validation system which limits access to only primary directory as specified in the settings area, while preventing traversal or root access
  • Removed realpath XML directory validation, now replaced by a new path validation system

9.0.16 – 2023-01-11

  • Fixed issue where some users reported warning/error being thrown by realpath implementation. Now catches these errors and reverts to default
  • Improved absolute path enforcement and directory traversal implementation from 9.0.15 (Thanks to Rezaduty)

9.0.15 – 2023-01-10

  • Fixed issue where XML directory path allowed directory traversal, absolute paths now enforced, using realpath method (Thanks to Rezaduty)

9.0.14 – 2022-12-14

  • Improved PHP8.1 compatibility by introducing “#[\ReturnTypeWillChange]” to classes which extend without return types
  • Improved overall stability of Gutenberg modules
  • Improved settings area styling (Atlas Novus)
  • Fixed issue where some panel/component layouts would be visible outside of container during initialization
  • Fixed issue where updateOffset would fail on Google Markers in some older installations
  • Fixed issue where styling page had a typo for the phrase “effect” (Atlas Novus)
  • Fixed issue where some (most) translations would include “1” before the radius selection unit
  • Fixed issue where remove duplicate would delete duplicates from different maps (Thanks Nicoletta Maia)
  • Fixed issue where shape hit regions would be calculated incorrectly at alternate broswer zoom levels and retina displays (OpenLayers)
  • Fixed issue where some older themes would throw a warning in widget area due to Gutenberg integration
  • Fixed issue where some installations would cause an activation error which could cause some automated test systems to falsely flag the plugin as not compatible with a PHP version (Example: WP Hive)

9.0.13 – 2022-11-01

  • Fixed issue where map would not initialize in some AMP environments, even when AMP is disabled, due to prototype overrides
  • Fixed issue where Google Maps API would not load correctly for zn_CN locale users
  • Fixed issue where Upgrader class did not assert validity of the fromVersion, which could lead to errors
  • Fixed issue where Settings class would not properly correct corrupted settings objects
  • Update Atlas Novus install ratio to split based on the day in the month, this should be more consistent
  • Updated all translation files to include missing string definitions
  • Updated all translation definitions to not be “fuzzy”
  • Update it_IT translation file (Thanks to updownbikes)
  • Tested up to WordPress 6.1

9.0.12 – 2022-10-13

  • Fixed issue where minified library files were being loaded when in developer mode only
  • Fixed issue with CRUD class KSES processing
  • Updated Atlas Novus install ratio probability calculations to use a larger sample range

9.0.11 – 2022-09-20

  • Added various supports for Pro add-on settings
  • Fixed issue with country code module where it was using TLD instead of ISO 3166-1 alpha-2
  • Updated internal engine controller to make use of mt_rand() instead of rand(), to improve probability factoring
  • Updated da_DK translation file (Internal Adjustment)

9.0.10 – 2022-08-24

  • Fixed issue where “I agree” GDPR button would not be translated once global settings are saved
  • Fixed issue with Nominatim query params, where some restrictions would not be respected
  • Fixed issue where combined file was preferred over minified file when the servers archive class would extract slower than expected. Introduces delta tolerance
  • Updated Atlas Novus install ratio to increase the amount of users who receive the new user interface temporarily (Ratio: 70%)
  • Tested Borlabs Cookie integration, found to be fully functional after in depth discussion with their team

9.0.9 – 2022-08-11

  • Added Atlas Novus tag to plugin website link
  • Removed internal build swap notice, for the time being

9.0.8 – 2022-08-03

  • Added installer links to API key fields in settings area, to improve API key creation process for returning users
  • Updated all base PO files, source information updated for future improvements
  • Updated branding assets

9.0.7 – 2022-07-27

  • Added button styling to primary installer skip button, to make this option more clear to new users
  • Added installer auto skip system, which will delay the first time setup flow by 1 day automatically for new users
  • Added intelli-panel system to editor, which opens the feature editor if a map does not have any of the specified feature type (Atlas Novus)
  • Added map editor tour system (beta), which leads the user through the first time marker creation process (Atlas Novus)
  • Fixed issue where gallery setting hint was being shown in basic only, incorrectly

9.0.6 – 2022-07-14

  • Added option to dynamically refactor single quote SQL queries within our core. This solves issues in environments where single quote statements are not supported, such as WP Engine
  • Fixed issue where OpenLayers canvas would scale incorrectly on retina displays
  • Fixed issue where OpenLayers canvas would inherit theme max width values, which could lead to misplacement of markers
  • Fixed issue where separated Store Locator search would run even when no request is passed, causing a focus on address field
  • Fixed issue where Store locator was initializing on the first element broadly matched, this could lead to issues when using add-on
  • Fixed issue where DataTables reload would be called early and cause an error to be thrown
  • Fixed issue in ‘isModernComponentStyleAllowed’ method which did not account for Atlas Novus build
  • Fixed issue where Reflection exception would not be handled gracefully where no class name is present (Thanks to Amit Tal)
  • Updated Atlas Novus install ratio to reduce the amount of users who receive the new user interface temporarily (Ratio: 30%)
  • Updated DataTables bundles to 1.12.1 (Excl. Styles)
  • Updated DataTables Responsive bundles to 2.3.0

9.0.5 – 2022-07-06

  • Added ‘is-fullscreen’ class to maps when they enter fullscreen mode, adding control over styling
  • Improved underlying canvas handling on retina displays with OpenLayers
  • Fixed issue where fullscreen height on Safari, with OpenLayers would not be respected
  • Removed calls to $.isNumeric and replaced them with WPGMZA.isNumeric counterpart
  • Removed $.bind calls and replaced them with standard $.on event listeners

9.0.4 – 2022-06-29

  • Fixed issue where enhanced autocomplete may not initialize on some websites

9.0.3 – 2022-06-28

  • Added improvements to enhanced autocomplete module for admin marker creation
  • Fixed issue where enhanced autocomplete would handle referrer bound keys incorrectly
  • Updated de_DE translation file (Internal Adjustment)

9.0.2 – 2022-06-24

  • Added ability to skip installer. Will be reminded 1 day after to complete installation
  • Added improvements to admin marker addition autocomplete system tools
  • Fixed issue where installations running PHP 7.2.X would be unstable in some cases
  • Fixed issue with spelling on support pages
  • Fixed issue with writrsblock reset delegation (Atlas Novus)

9.0.1 – 2022-06-22

  • Added “day one” core patches across all cores
  • Added WritersBlock support logic (Atlas Novus)
  • Added ability to reopen installer (Legacy)
  • Fixed issue with html overlay placement within map container
  • Fixed issue with support forum links
  • Fixed activation order issues with some add-ons
  • Improved upsell locations to better convey value of upgrading (Atlas Novus)
  • Removed Pro 8 stability notices to avoid confusion
  • Removed Advanced Marker panel, moved fields to standard marker panel (Atlas Novus)

9.0.0 – 2022-06-20

  • Added Atlas Novus Internal Engine

  • Added Internal Engine base architecture

  • Added infrastructure to support HTML overrides in a later version

  • Added local file overrides based on engine selection

  • Added ability to switch between internal engine (Atlas Novus or Legacy)

  • Added installer to plugin flow to improve and simplify plugin setup

  • Added Quick Start tool from Google Maps Platform, simplifying API key creation

  • Added tile server preview to OpenLayers installer to simplify setup process

  • Added persistent notice system, allowing dismissable actionable notices to be shown to users as needed

  • Added system information to support areas to help with debugging issues as needed

  • Added streetview event delegation triggers

  • Added additional dimension options for map sizes

  • Added additional developer hooks

  • Added additional JS events

  • Added attribution for lnglat column patch (Thanks to CNick)

  • Added cs_CZ translation file (Thanks to Petr Aubrecht)

  • Added cross version compatibility checks and support

  • Improved OpenLayers gesture handling, should function similarly to Google Maps now

  • Improved Custom Script editors to use CodeMirror with custom theme. Uses bundled WP Core version of CodeMirror

  • Improved shortcode handling to better support extending code

  • Improved shape management by standardizing modules and extension

  • Improved GDPR consent management system

  • Improved info window management system

  • Improved map initialization system

  • Improved “Open by default” info window functionality

  • Improved query variable supports

  • Improved map event management and distributors

  • Improved bounds based event management

  • Improved distance management systems

  • Improved auto pan system for info window in OpenLayers

  • Improved existing developer hooks

  • Improved existing JS events

  • Improved code comments and clarity of primary modules

  • Improved underlying architecture, in support of future development

  • Improved older modules by converting them to the new architecture (Atlas Novus refactor)

  • Improved compatibility core

  • Improved major version migration core

  • Improved map widget

  • Fixed issue where dependencies would be managed incorrectly in edge cases (Thanks to shazahm1)

  • Optimized file sizes (Thanks to lowwebtech)

  • Removed redundant files

  • Atlas Novus

    • Added extensive use of CSS variables
    • Added Styling page to allow component styling
    • Added Internal Viewport Architecture for component management
    • Added comprehensive placement options for components
    • Added fullscreen supports to move viewport into fullscreen mode
    • Added quick add tools to map editor
    • Added OpenLayers theme support, via CSS Filters
    • Added OpenLayers theme editor, via CSS Filters
    • Added dedicated store locator shortcode
    • Added ability to place store locator on a separate page and redirect to a map page when submitted
    • Added Store Locator Gutenberg Block
    • Added Gutenberg custom category
    • Added batch loading support
    • Added SVG icons to user facing elements to reduce dependency on libraries
    • Added point label feature type, allowing you to add text to maps
    • Added color picker, allowing for improved color management
    • Added supports for feature state handling
    • Added capsule module core architecture
    • Added additional file processors to support new components
    • Improved Welcome UI/UX
    • Improved Credits UI/UX
    • Improved Map List UI/UX
    • Improved Map Editor UI/UX
    • Improved feature editor panel UI/UX
    • Improved settings panels reduce time to setup
    • Improved Settings Page UI
    • Improved settings placement/groupings to reduce time to setup
    • Improved all admin datatables
    • Improved all preloaders
    • Improved all admin notices
    • Improved Google Maps theme editor
    • Improved Danger Zone tools
    • Improved Support page
    • Improved Shape drawing tools
    • Improved Gutenberg block supports
    • Improved responsiveness of all map related components
    • Improved error notice reporting
    • Improved front end component UI/UX drastically
    • Improved map placement/alignment system

8.1.22 – 2022-03-29

  • Recompiled some internal files as they were out-dated for some new installations

8.1.21 – 2022-03-03

  • Fixed issue where XML source would not be updated when deleting a marker
  • Improved cloud based autocomplete system
  • Updated de_DE translation file due to missing translations
  • Updated es_ES translation file (Thanks to Alejandro Catalán)
  • Updated most language file sources

8.1.20 – 2022-02-03

  • Fixed issue where GDPR notice would not appear in some installation when using OpenLayers
  • Fixed issue where traditional Chinese language would not work with DataTables (Encoding issue)
  • Fixed issue where erroneous marker read error would be thrown on some installations
  • Added Facebook, Reddit and Newsletter Links (Opt-in) to welcome and support page
  • Updated de_DE translation file (Thanks to michik1712)
  • Improved REST API request response sanitization
  • Improved experimental batch loader, feature not available by default (beta)
  • Tested up to WordPress 5.9

8.1.19 – 2021-12-09

  • Added simple API key creation link to improve the process of getting a key setup
  • Fixed issue where uncaught error would be thrown by GDPR module, and tools like Complianz
  • Fixed issue where settings and map editor templates contained incorrect class names for info-window styles
  • Fixed issue where color fields were not correctly marked in some template files
  • Improved initialization error handling, these are now shown as warnings, caught by the primary initializer

8.1.18 – 2021-11-02

  • Improved sanitization, validation and escaping. Improving user editable content management, trace calls, and temporary variables
  • Improved sanitization, validation and escaping on legacy code base. Code largely unused but has been addressed for additional security
  • Removed polygons labels settings placeholder when in OpenLayers engine, this is not supported by OpenLayers presently
  • Removed legacy code which loaded internal version of CodeMirror
  • Removed legacy code which allowed manual jQuery version to be loaded. This has been disabled for some time, however, code is now fully deprecated
  • Deprecated some legacy functionality
  • Updated stable tag to reflect version number correctly

8.1.17 – 2021-10-18

  • Improved marker editor geocode usage to only geocode when an address has changed, or is being added for the first time. (Reduced API calls due to usage)
  • Fixed issue where editing a marker which has already been position adusted would trigger a geocode on the original address, moving the marker back to the original placement
  • Fixed issue where map preview would not load on some elementor pages (Preview view only)
  • Fixed issue where RTL sites would misplace markers in OpenLayers
  • Fixed issue where StreetView icon would not show on some websites (Theme dependent)
  • Fixed issue where SQL quotation mark usage for actions on marker, map, and features (trait) would cause datatable failures
  • Removed uses of ‘SQL_CALC_FOUND_ROWS’ AND ‘FOUND_ROWS’ in queries to ensure MySQL 8.0.17 and above compatibility

8.1.16 – 2021-09-20

  • Fixed issue where map editor would not initialize on some older WordPress versions
  • Fixed issue where admin bar scroll offset would sometimes be undefined
  • Updated Real Cookie Banner integration, for improved stability

8.1.15 – 2021-09-01

  • Fixed issue where special symbols would be overprocessed by the KSES sanitizer
  • Fixed issue where Avada Alert icons would not show due to our icon libraries loading in post/page editor
  • Fixed issue where modern store locator would not display correctly in OpenLayers
  • Remove Klokantech 3D tileserver as this does not appear to be supported (OpenLayers)
  • Added MapTiler Streets, Outdoor, Pastel, Basic (OpenLayers)
  • Added indicator for most tilesets that require an API key (OpenLayers)
  • Added preinit event delegate
  • Added global initMaps method
  • Added global onScroll method
  • Added core integration for Real Cookie Banner integration
  • Updated it_IT translation file (Thanks to Alessio Cornale)
  • Updated Stamen Watercolor tileset to point to HTTP host (OpenLayers)
  • Updated OpenPtMap tileset to point to HTTP host (OpenLayers)

8.1.14 – 2021-07-28

  • Fixed issue where custom scripts (CSS & JS) would be html_entities encoded by the wp_kses_post function, causing custom scripts to run unpredictably
  • Fixed issue where uncaught exception would cause errors to show on the frontend, although it is gracefully handled
  • Fixed issue where carousel time placeholder had an unclosed attribute
  • Resized credit images to standard sizes (Reduction in file size)
  • Resized interface images and changed color spaces (Reduction in file size) (Thanks to lowwebtech on GitHub)
  • Tested up to WordPress 5.8

8.1.13 – 2021-06-15

  • Fixed issue where Authenticated Persistent XSS could be executed on any CRUD module. Uses wp_kses_post for cleanup. Applies to Markers, Polygons, Polylines and Shapes (Thanks to Visse)
  • Fixed issue where Authenticated Persistent XSS could be executed on GDPR settings fields. This was resolved by adding wp_kses_post to all settings fields (Thanks to Visse)
  • Updated security report credit for 8.1.12 withi changlog and readme files

8.1.12 – 2021-06-03

  • Fixed issue where authenticated Stored Cross-Site Scripting could be executed in the map list (Thanks to Mohammed Adam)
  • Fixed issue with translation file name for no_NO. Changed to nb_NO
  • Fixed issue where some OpenLayers tilesets were loaded via http instead of https
  • Fixed issue where legacy admin styles were force loaded in gutenberg editor. Reported for causing conflicts with SEOPress
  • Fixed issue where checboxes within the admin area would show a white tick due to issues in the legacy admin stylesheet
  • Fixed issue where ‘no results’ alert would show when resetting the store locator search
  • Fixed issue where ‘Store’ post types in WP Store Locator would break due to our API loader take preference, as reported by plugin author
  • Fixed issue where polygon info-windows would have quick edit link in map editor. This is not supported by polygons at the moment
  • Fixed issue where map click event would fire when clicking on polygons in OpenLayers. This is due to pixel interpolation issues.
  • Fixed issue where custom CSS would be added to the DOM multiple times
  • Fixed issue where custom JS would be added to the DOM multiple times
  • Fixed issue where global localized variables would be added to the DOM multiple times
  • Fixed issue where create map page link would cause a fatal error due to a non-static method definition
  • Fixed issue where included automcomplete styling would not appear as intended
  • Removed ‘Delete all maps’ danger zone controller from the settings area as this does not apply to basic users
  • Removed PHP8 disable functionality
  • Removed chat link
  • Added support for PHP8, this is a prelim pass but from tests works well. May be revisited in the future
  • Added link to WPML integration documentation
  • Added setting to disable tilt controls in the Google Maps option
  • Added check for the ‘lnglat’ column, if it is present, it will be automatically pruned from the database as it is not supported or used
  • Added general notices about features
  • Added supporting polygon info-window placement style for OpenLayers
  • Updated es_ES translation file (Thanks to Pedro Ponz)

8.1.11 – 2021-03-08

  • Fixed issue with ‘No results found’ alert not showing in some cases
  • Fixed issue where max/min zoom levels would not be respected
  • Fixed issue with Fr translation file mi and km translations being prefixed wth ‘1’

8.1.10 – 2021-02-18

  • Fixed issue where text JSON was not parsed with some caching solutions (Breeze for example)
  • Fixed issue with spelling of ‘Autoptimize’ in advanced settings tab
  • Fixed issue where compact/bare-bones/minimal user interace styles may not have an effect on some sites
  • Fixed issue where multiple jQuery identification module would cause a failure in map initialization when finding embedded scripts
  • Fixed issue where legacy store locator layout would use the JS Alert ‘not found’ message, instead of the message container in the DOM
  • Fixed issue with ‘miles away’ spacing on store locator searches
  • Fixed issue with switch styling which have inline ‘notices’
  • Fixed issue where the /features/ ajax fallback would fail due to the regex comparison
  • Adjusted width of settings labels in map editor, for slightly improved interface layouts
  • Added option to show/hide store locator distances
  • Added notice to GDPR settings when Complianz is enabled, as they manage our GDPR settings internally instead. Settings are now disabled to reduce any confusion
  • Added base upgrade hook for auto backup triggers in Pro add-on
  • Added beta notice to “Only load markers within viewport”

8.1.9 – 2021-02-04

  • Fixed issue where ‘Hide Point of Interest’ option was not available without the Pro add-on
  • Added establishment suggestions to the Google Maps Autocomplete module
  • Added basic Usercentrics integration. Thanks to the Usercentrics development team for additional technical documentation

8.1.8 – 2021-02-01

  • Fixed an issue where OpenLayers Tile Server Key field would not be visible without the Pro add-on
  • Fixed an issue where OpenLayers would not allow click event bubbling for features
  • Fixed an issue with marker storage logic that would prevent the Pro add-on from removing gallery images
  • Fixed an issue where the store locator would scroll to the map element, even when modern locator style is active
  • Fixed an issue with the onApproveMarker event trigger in the marker panel
  • Added pep.js to the dependencies of the plugin to support pointer events on iOS 12 devices

8.1.7 – 2021-01-26

  • Fixed issue where you could not disable FontAwesome from loading on the frontend
  • Fixed issue where FontAwesome V4 would be loaded when V5 should have been loaded
  • Fixed issue where Datatables API extension would occur before datatables is initialized
  • Fixed issue with polygon line opacity mutator not allowing for changes to take affect
  • Fixed issue with the WPGMZA isFullscreen variable scope would resolve correctly
  • Fixed issue where OpenLayers Geocoder would not respect country restirctions
  • Fixed issue where primary stylesheets would not have a version number present, this caused issues with cache busting when updates are released
  • Fixed issue where no max-width rule was applied to icon column in marker list within the admin area
  • Added placeholder structure for owl carousel dependency settings
  • Added ‘color paste’ buttons next to all color fields to allow for easy hex code pasting for specific components
  • Added a failsafe for broken polydata (legacy) paths which will fail to resolve in some instances, which could break the features end point
  • Added option to set a custom OpenLayers tile server URL if you prefer to do so, API field still applies if filled

8.1.6 – 2021-01-21

  • Fixed issue where polyline opacity would not be respected
  • Fixed issue where ‘get_user_locale’ would fail in some environments
  • Fixed issue where ‘approve’ button would not fire relevant events with VGM add-on in place
  • Fixed kml field storage issue
  • Added styling classes to the danger zone to match UI
  • Added a 405 DELETE fallback check to the REST API handlers
  • Added scroll to feature panel when editing a feature

8.1.5 – 2021-01-19

  • Removed the external reference for the live chat image and made it local
  • Added new functionality to reset and/or delete your map, marker and shape data
  • Fixed a conflict with instant.page (‘i’ and ‘l’ variable conflict)
  • Fixed issue where modern interface style will not override the store locator styles for legacy maps
  • Fixed issue where modern store locator was not responsive
  • Fixed issue where olMarkers were attempting to access Google LatLng objects in some instances, this now uses LatLng Literals instead
  • Fixed issue where text overlays would not have a minimum width, which caused text to appear strangely on the map
  • Fixed issues with some store locator settings not being respected on the frontend
  • Fixed issue where polygon settings may not be mutated by the polygon module
  • Fixed issue with WP Rest Cache (by Acato) not caching the marker-listing end point correctly
  • Fixed issue where map click event would not bubble correctly from native event dispatcher
  • Added back marker position adjust mode and refined the functionality slightly. This was removed in an earlier version mistakenly
  • Added a fallback for servers which do not support the DELETE request method via the RestAPI
  • Added a close button to the live chat link in the map editor and map settings page

8.1.4 – 2021-01-14

  • Fixed a bug that stopped the GDPR consent form to display if Open Layers was enabled
  • Fixed a bug that broke the compatibility with the ComplianZ WordPress Plugin
  • Fixed a bug with dataTables translations for Finnish
  • Fixed a bug that caused “open_basedir restriction in effect” on some servers
  • Fixed a bug that caused “Unparenthesized’a ? b : c ? d : e’is deprecated” to appear for some users

8.1.3 – 2021-01-13 – High priority

  • Fixed the bug where “miles away” or “km away” was not showing up on markers once a store locator search was done
  • Fixed a bug that caused markers to not load in some instances
  • Fixed an issue where the MapsEngineDialog would cause headers already sent error on some sites, causing a white screen on admin-post.php
  • Fixed an issue where settings don’t get sent to the frontend, such as the starting location of the map. Only occurs on some sites
  • Added an option to add an OpenLayers TileServer API key for server that require an ‘apikey’ to be sent with requests

8.1.2 – 2021-01-11 – High priority

  • Fixed issue where polylines would not respect their stored configuration
  • Fixed issue with V6 API dequeuer still running in V8, even though option was removed from core
  • Fixed bug with open infow windows by default only opening 1 marker, usually the last one
  • Fixed issue where bicycle, traffic and transport layers would be enabled for all users
  • Fixed issue where legcay transport layer setting name would always be true on frontend
  • Fixed issue with Finnish datatables language file being lowercase, crashing map list
  • Fixed an issue where sometimes the settings area would produce a white page instead of redirecting back to settings
  • Fixed an issue where you would not be able to edit shapes
  • Fixed an issue where you would not be able to delete shapes
  • Allowed for a one-click experience to swap over to Open Layers if you’re not using a Google Maps API key in the map editor
  • Added a new “Edit” button in the marker infowindow within the map editor
  • Fixed a bug that cause “modern store locator” to not respect the setting

8.1.1 – 2021-01-07 – High priority

  • Fixed SVN issue

8.1.0 – 2021-01-07 – High priority

  • OpenLayers now fully supports shapes
  • New, easy-to-use and highly efficient shape drawing tools
  • New “batched marker loading” feature allows marker loading to be broken up into parts for a smoother loading experience with large amount of markers
  • Hide Load Maps Engine API option when you select the OpenLayers map engine
  • Fixed Store Locator Radii values not updating Default radius option
  • Fixed OpenLayers Disable Zoom Controls not working
  • New, searchable, paginated, sortable tables for polygons, polylines, heatmaps, circles and rectangles
  • New Vector render mode setting for OpenLayers – Significantly improves performance with large amount of markers
  • Map editor now “all-in-one” with all controls on a single page
  • Map editor and settings page are now fully W3C and WCAG compliant
  • Map editor and settings page are now using DOM for easy and flexible customisation
  • Map editor and settings page now handle setting serialization dynamically
  • Marker, polygon, polyline, heatmap, rectangle and circle panels now handle setting serialization dynamically
  • All backend content, logic and presentation is now separate
  • All miscellaneous JavaScript now fully modular and fully extensible
  • AJAX loading fully supported

For more, please view the WP Go Maps site

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907