Add a map with a marker in less than 100 seconds:Add a map with marker in less than 100 sec:
If you want detailed information about the OSM plugin, visit these pages:
- Homepage: WP-OSM-Plugin
- Forum: EN|DE
- Bluesky: @mika-official.bsky.social
Features of the WP OSM plugin:
- OpenStreetMap, HOT, OpenSeaMap, OpenTopoMap, BaseMap (AT), Stamen in posts/pages
- Integration in post / page / widget
- HTML Popup Marker
- GPX and KML (including upload in the Media Library)
- Map with geo-tagged posts/pages as linked marker
- Map with autogenerated track by geo-tagged posts / pages
- HTML meta tags for geo-tagged posts/pages
- Uses the OpenLayers library
- SSL connection (HTTPS)
Languages – thanks to:
- English
- Deutsch
- Japanese [by Sykane]
- French [by Tounoki and Marc]
- Russian [by Вячеслав Стренадко/Vyacheslav Strenadko]
- Italian [by Andrea Giacomelli]
- Spanish [by Colegota]
- Romanian [by Sorin Pop]
-
Swedish [by Olle Zettergren]
-
OpenLayers: Open Source JavaScript, released under the 2-clause BSD
IMPORTANT:
The WordPress Plugin Review Team requires an opt-in feature for attribution display according to the WordPress Plugin Guidelines. Please enable the checkbox “Display attribution (credit) in the map.” in the WP OSM plugin shortcode generator, or add attribution manually to your map. Otherwise, this may violate map or data licenses, for example OpenStreetMap.
This plugin enables GPX and KML upload!
Licenses of the maps:
* OpenStreetMap: OpenStreetMap License
* OpenTopoMap: OpenTopoMap License
* Stamen Maps: Stamen License
* BaseMap: BaseMap License
* Thunderforest (API key): Thunderforest License
* Others: Depends on the map you are including – check it before including it!
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| — | — | ||
WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability. On the site with the affected version of the plugin enabled, a logged-in user with a page-creating/editing privilege can embed some malicious script with a crafted HTTP request. When a victim user accesses this page, the script may be executed in the user's web browser. | |||
| 6.4 MEDIUM | — | ||
The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's osm_map and osm_map_v3 shortcodes in all versions up to, and including, 6.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. | |||