WP Manifestindependent plugin directory
manifest / editor / ace-google-map-block

Ace Google Map Block WP Registry grade B. Medium-severity findings · 1 findingWP RegistryMedium-severity findings · 1 findingOpen the reportB

A Google Maps block for modern WordPress.

★ 3stars
19release downloads
v0.424latest · 2 years ago

Install

Download acemedia-map-block-v0.424.zip From the v0.424 release on GitHub, Oct 16, 2024

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/acemedia/ace-google-map-block/releases/download/v0.424/acemedia-map-block-v0.424.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Ace Map Block

Contributors: Shane Rounce of AceMedia.ninja

Tags: block, map, google, street view, places, wordpress, gutenberg

Tested up to: 6.6

Stable tag: 1.0.0

Interactive Google Maps block with Street View and Places Autocomplete, fully integrated within the WordPress block editor.

Description

Ace Map Block allows you to embed customizable Google Maps into the WordPress block editor, providing full integration with Google Places Autocomplete, map pins, and Google Street View. It is perfect for creating interactive, location-based content with real-time search, map, and street view features.

Features include:

  • Adding fully interactive Google Maps directly inside the block editor.
  • Droppable pins with customizable latitude and longitude.
  • Toggleable Street View with heading and pitch customization.
  • Real-time location search with Google Places Autocomplete.
  • Automatically updates address field from selected place or reverse geocoded map clicks.

Ace Map Block integrates seamlessly into the block editor, allowing users to customize map settings, switch between map and street view, and update the map pin’s location with ease.

Installation

This section describes how to install the plugin and get it working.

  1. Upload the plugin files to the /wp-content/plugins/acemedia-map-block directory, or install the plugin through the WordPress plugins screen directly.
  2. Activate the plugin through the 'Plugins' screen in WordPress.

Frequently Asked Questions

How do I add a map to my page?

Simply add the "Ace Map Block" from the block editor. You can customize the map's location, pin, and toggle Street View using the block inspector.

Can I search for places on the map?

Yes, the plugin integrates Google Places Autocomplete, allowing you to search for locations in real-time. The map will automatically update based on your selected place.

How does Street View work?

You can toggle between map view and Street View using the "Is Street View?" toggle in the block inspector. Alternatively, you can drop the yellow man on the map to switch to Street View directly.

Does the address field update automatically?

Yes, the address field is automatically updated based on either the selected Places result or the location clicked on the map (using reverse geocoding).

Screenshots

  1. Block editor interface with Ace Map Block and inspector settings.
  2. Example of map and pin added to a post or page with Street View enabled.

Changelog

0.420

  • Initial release of Ace Map Block.
  • Integrated Google Maps block with customizable pins and real-time location search.
  • Support for Google Street View with heading and pitch customization.
  • Places Autocomplete integration for location search.
  • Automatic address updates using Places or reverse geocoding.

Advanced use

For advanced users, Ace Map Block includes reverse geocoding and manual pin dropping to update map locations dynamically within the editor. Perfect for location-based websites that need customizable map and Street View integration directly in WordPress.

Releases

4 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v0.424 latest
Oct 16, 2024 2 years ago
acemedia-map-block-v0.424.zip
11
Oct 4, 2024 2 years ago
ace-map-block-v0.422.zip
4
Oct 4, 2024 2 years ago
ace-map-block-v0.421.zip
2
Oct 4, 2024 2 years ago
ace-map-block.zip
2
B grade

Security

Ace Google Map Block 0.424 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
0.424
Findings
1
Worst severity
medium
Content hash
47de5a17037ce969d1c0d43b…

Findings

  • medium Public REST embeds Google Maps API key in imageUrl

    information_disclosure

    Routes acemap/v1/(?P<id>) and acemap/v1/all register permission_callback __return_true. Callback acemedia_map_block_get_maps_data returns post meta acemedia_google_map_data; acemedia_map_process_maps_data builds a Static Maps URL containing get_option('acemedia_map_block_api_key') whenever mapIsImage is set. Unauthenticated callers can harvest the key from JSON without loading a page that would otherwise apply Maps HTTP-referrer restrictions inconsistently.

    ace-map-block.php:317-356

    Recommendation

    Do not include the raw API key in public REST responses; generate signed Static Maps URLs server-side with a restricted key, or require authentication for map metadata endpoints. Prefer a separate Maps key locked to HTTP referrers/IPs and never echo it in JSON APIs.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.