WP Go Maps – Google Map, OpenStreetMap, Leaflet Map

10.1.06 – 2026-07-23

Fixed issue where inactive map data would be served on direct /maps requests even if the map was not active. Security issue, thanks to Bao – BlueRock

Fixed issue where individual datasets like /marker, /polygon and /polyline would be served even if the map was inactive. Security issue, thanks to Bao – BlueRock

10.1.05 – 2026-07-23

Fixed issue where inactive map data would still be visible via the /features REST endpoint. Security issue, thanks to Bao – BlueRock

Improved JSON encoding in the REST API response layer, using wp_json_encode instead of json_encode to ensure proper handling of multibyte characters and other edge cases. Thanks to Christopher Ross

Updated installation module to enforce a 75/25 split between Atlas Novus and Atlas Major for new installations, as part of internal split testing.

10.1.04 – 2026-07-10

Fixed issue where unauthenticated SQL Injection was possible via the limit paramater in the Marker Filter. Security issue, thanks to Jakub Herman

10.1.03 – 2026-06-17

Fixed issue where the internal engine assignment could be skipped on fresh installs, defaulting new installations to Atlas Major instead of the intended random assignment

10.1.02 – 2026-06-15

Fixed issue where unauthenticated requests could trigger unintended database writes via the DataTables REST endpoint. Security issue, thanks to Thanh Diem (Wordfence)

Fixed issue where Datatables language files may not load correctly in some environments due to name case. Fa