Ultimate Maps by Supsystic

Ultimate Maps by Supsystic is the best Google Maps alternative. It includes OpenStreetMap (OSM), Bing Maps, MapBox and Thunderforest maps services

v1.3.2supsysticUpdated 2026-05-31Added Oct 18, 201810k+ installs92% rating
24
Score
1,034
Errors
374
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance100
Maintainability0

Top Issues by Category

i18n662
security430
maintainability304

Issues Details

1,408 issues found in latest scan

ERROR559
WordPress.WP.I18n.NonSingularStringLiteralDomain

The $domain parameter must be a single text string literal. Found: $file['error']

ERROR269
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$align'.

WARNING130
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING100
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERROR43
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

ERROR39
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERROR35
WordPress.Security.EscapeOutput.UnsafePrintingFunction

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNING31
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_FILES[$this->_inputname]

WARNING28
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_COOKIE[$name] not unslashed before sanitization. Use wp_unslash() or similar

ERROR28
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING24
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING17
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_FILES[$this->_inputname]. Check that the array index exists before using it.

ERROR16
WordPress.DateTime.RestrictedFunctions.date_date

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

WARNING14
WordPress.DB.PreparedSQLPlaceholders.UnquotedComplexPlaceholder

Complex placeholders used for values in the query string in $wpdb->prepare() will NOT be quoted automagically. Found: %1s.

WARNING13
WordPress.DB.DirectDatabaseQuery.SchemaChange

Attempting a database schema change is discouraged.

ERROR12
WordPress.WP.I18n.NonSingularStringLiteralText

The $text parameter must be a single text string literal. Found: $configOptions[$key]['description']

WARNING10
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

ERROR8
WordPress.WP.AlternativeFunctions.rand_mt_rand

mt_rand() is discouraged. Use the far less predictable wp_rand() instead.

ERROR7
WordPress.WP.I18n.UnorderedPlaceholdersText

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Invalid length for %s, max length is %s'.

ERROR3
WordPress.WP.AlternativeFunctions.file_system_operations_mkdir

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

ERROR2
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"No such method exists: $name"'.

ERROR2
WordPress.WP.AlternativeFunctions.file_system_operations_fopen

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

ERROR2
WordPress.WP.AlternativeFunctions.rand_rand

rand() is discouraged. Use the far less predictable wp_rand() instead.

WARNING2
WordPress.WP.I18n.NoHtmlWrappedStrings

Translatable string should not be wrapped in HTML. Found: '<h3>More then eleven days with our %s plugin - Congratulations!</h3>'

ERROR2
badly_named_files

File and folder names must not contain spaces or special characters.

Latest Snapshot

Findings

1,408

Errors

1,034

Warnings

374

Score History

First score snapshot

First scan completed Jun 20, 2026

v1.3.2 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v1.3.2

24

Latest

Findings
1,408
Errors
1,034
Warnings
374
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins