MapSVG

• Site stability: Fixed site-wide fatal error after updating to 8.16.2 on some sites.
• Database migration: The database migration is more robust and no longer retries on every request after a failure.

• Security: Several security-related fixes.
• WordPress posts: Permanently deleted posts now remove their linked MapSVG records.
• Gutenberg Location: Addresses containing escaped characters are preserved when a post is saved.
• Region data: Editing region fields preserves the internal orphan status and existing region records.
• Remote CSV import: The selected ID column is used when updating existing rows.
• SVG editing: Saved SVG changes refresh on the map instead of remaining cached.
• Repeated SVG saves: Saves made within the same second each receive a new SVG version.
• Firefox: Pages scroll normally while the pointer is over map regions.
• Mobile Google Maps: Switching between Map and List preserves the world zoom level.
• Google Maps overlays: SVG overlays stay aligned when the map container has fractional dimensions.
• Hidden maps: Maps redraw when their container becomes visible.
• Visibility List: Hiding an SVG path works when that path has an inline display style.
• SVG panning: The map can be panned after zooming out to the minimum level.
• Region color picker: The current HEX color value appears correctly.
• Legacy maps: Maps created in version 4.x load correctly after upgrading.
• Map duplication: Duplicating a map works on sites using plain permalinks.

• Fixed: Security — hardened WordPress post-type REST routes with additional access checks.
• Fixed: Filters — public maps no longer get stuck on a loading spinner when a cached page sends an expired WordPress REST nonce; those reads retry without the stale nonce.
• Fixed: CSV import — file uploads honor the selected ID column so existing region rows update instead of duplicating. "No ID" appends as expected, and Excel BOM headers no longer create blank IDs.
• Fixed: Loading spinner — the spinner sits next to the loading text, empty text is hidden, and the preloader is visible before JavaScript runs.
• Fixed: Mobile toolbar — Map/List icons show correctly when Shadow DOM is enabled.
• Fixed: Pinch-zoom — pinch-zoom no longer fails on some iPad browsers (including DuckDuckGo).
• Fixed: USA counties map — corrected the Orange County spelling.
• Fixed: World map — Oahu’s south-shore path now covers Sand Island / Honolulu Harbor so true WGS84 pins there sit on land. Gleap #237364

• Improved: Regions / SVG changes — replacing or editing an SVG no longer deletes region records whose IDs disappeared. Those rows stay as orphans so you can copy their data, then remove them from Regions → Settings → Clean orphan region records.
• Improved: Region labels — more reliable label centering (better placement on awkward shapes, no flash before styles load). Bundled SVG maps were updated with the new centers.
• Fixed: Security / REST API — hardened remote CSV and API fetches so user-supplied URLs cannot reach private, loopback, or cloud-metadata hosts.
• Fixed: CSV import — Google Sheets web-view URLs are rejected; use a published CSV link instead.
• Fixed: Admin — stopped a map resize feedback loop that could keep resizing the preview.

• Improved: Elementor + Gutenberg — added native integrations (Elementor widget and Gutenberg block) with live map preview directly inside the page editor, so you can see map updates while editing.

• Improved: Admin UI — data sources list now shows collection name, type, and linked post type.
• Improved: Compatibility — declared tested with WordPress 7.0.1.
• Fixed: WP Posts — fixed allowing the same WordPress post type to be attached to more than one data source.
• Fixed: API — requests for a missing collection/data source now return a clear bad-request error instead of failing.

• Fixed: SVG uploads — strengthened upload checks so only valid SVG files are accepted.
• Fixed: Security / REST API — hardened post-type and distinct-value endpoints against SQL injection.
• Fixed: Security / loading text — sanitized and safely rendered map loading text to prevent stored XSS.
• Fixed: Security / Handlebars — updated Handlebars to the latest version with security fixes.

• Improved: Data sources — you can delete unused data sources from the admin (connected sources and region tables stay protected).
• Improved: WP Posts — clearer Connect / Edit / Connected controls for data sources, and more reliable linking of maps to WordPress post types.
• Improved: Admin UI — cleaner data source actions (icon buttons) and form layout tweaks.
• Fixed: WP Posts / post types — fixed empty or missing postType on legacy posts_* schemas so post filters and sync work correctly.
• Fixed: Google Maps — removed an incorrect viewport restriction that could block map interaction.

• Fixed: data table was not getting created for new or duplicated maps

• Fixed: Forms — improved multiselect tag layout so tags don’t overlap other elements.
• Fixed: Popovers — fixed popovers closing when clicking inside them.

• Improved: Google Sheets auto-sync — added a full Google Sheets/remote CSV data source flow with scheduled auto-refetch support.
• Improved: CSV import — improved import flow with preflight validation, clearer ID-field handling, and smarter append/upsert behavior.
• Improved: Admin UX — improved CSV/database/regions controls, including geocoding options, read-only behavior, and add/edit button state updates.

• Fixed: zoom to cluster with markers at the same location

• Improved: categories can now group by text fields

• Improved: CSV import — large files (100K+ rows) are now processed in the background using chunked server-side parsing and WordPress Cron. Progress is tracked live and survives page reloads. Supports all field types including Location (with background geocoding), Image (remote URLs downloaded to WP Media Library with deduplication), Regions, Select, Checkboxes, Post, and Date.
• Improved: Error handling — all errors now include unique error codes. Extended descriptions are available at mapsvg.com/docs/errors.

• Fixed: map data now updates correctly when connected posts are published, unpublished, trashed, or restored.
• Fixed: directory item templates rendering issues.
• Fixed: zoom to a single marker after filtering.
• Fixed: region status colors not applying correctly.
• Fixed: Slovenia map calibration.

• Feature: load 1 post location only, for the currently opened post page
• Feature: choose AND/OR logic for the multiselect filters

• Fixed: show previous map button functionality

Examples:

• wp mapsvg export - Export all MapSVG database tables to SQL file
• wp mapsvg export --toDomain=mapsvg.com - Export and replace current domain with a new one in the .sql file
• wp mapsvg import /path/to/file.sql - Import MapSVG data from SQL file

• Feature: added wp-cli export/import commands.

• Fixed: Windows OS incompatibility

• Feature: rounded map buttons
• Fixed: check if phpinfo() is available

• Fixed: styles for multiselect fields

• Feature: map themes: default, rounded

• Fixed: map visibility in Classic Post Editor

• Fixed: tooltip flickering during mirroring near map edges

• Fixed: Handlebars templates not loading correctly when multiple maps were on the same page
• Fixed: location form styles in Gutenberg

• Fixed: not working {{distanceTo ...}} Handlebars tag

• Feature: Isolate CSS to shadow root (optional)
• Fixed: blurred map on zoom in Safari

• Fixed: XSS vulnerability in shortcode attributes

• Feature: Maximum zoom level for clustering
• Fixed: blurred map on zoom in Safari
• Fixed: zoom to cluster on Google Maps

• Fixed: empty directory in duplicated maps
• Fixed: "deprecated" error in logs

• Fixed: zoom to a cluster did not always reveal its markers

• Fixed: filtering by ACF using checkboxes fields
• Fixed: migration issues

• Fixed: filtering by ACF select and multiselect fields
• Fixed: added compatibility with PHP 7.4

• Fixed: unserialized ACF field values in filter options

• Fixed: duplicating maps created in older version of mapsvg was triggering an error about auto_increment
• Fixed: improved world.svg map calibration

• Fixed: prevent loading of Google Maps API for incompatible (uncalibrated) maps
• Fixed: user and access token creation (for support)
• Fixed: Clockwork issues in Laravel environment
• Fixed: filter tags were not loading when no filterSchema was provided
• Fixed: passing correct data to custom event handlers on mobile devices

• Fixed: SVG file reload failed when regions had no Title field.

• Fixed: prevent setting region statuses before the data has loaded from the server

• Fixed: marker drag & drop

• Fixed: buttons that control enabled/disabled state of the region status options
• Fixed: mobile map scroll issues
• Fixed: WP CPT connection, Gutenberg/Classic Editor scripts loading

• Fixed: lite version fatal error

• Fixed: visibility toggles for SVG groups
• Fixed: shortcode rendering in templates

• Fixed: scroll on mobile devices
• Fixed: null region titles

• Fixed: fixed issues of the "show another map in the same container" feature

• Fixed: security issue, checking uploaded file type

• Fixed: directory rendering issues with enabled categories

• Fixed: "Show another map" feature functionality
• Fixed: WP Rocket and LiteSpeed cache plugins were breaking MapSVG code. Added JavaScript files to exclusions in those plugins' settings.
• Fixed: premature jQuery call that was breaking the map when jQuery wasn't immediately available

• Fixed: deleting a post did not delete marker from the map
• Fixed: scrolling of css/js/templates code editors on Firefox
• Fixed: map sizing issues with some WP themes

• Feature: dynamic Region statuses
• Fixed: incorrect container height issues in the map editor

• Fixed: filter by region

• Fixed: saving settings on the main screen
• Fixed: maps not working with disabled permalinks

• Fixed: Duplicating a map now correctly updates the map ID in the "CSS" tab, preventing conflicts with the original map.

• Fixed a few vulnerabilities

• Fixed unavailable filtering by ACF fields
• Fixed handling of post type names containing dashes

• Fixed security vulnerabilities related to unauthorized shortcode rendering in templates

• Minor bugfix for migrations

• Minor bugfix

• Added SVG file sanitization for non-admins

• Fixed post title being rendered as plain text (in popovers / details)

• Fixed XSS vulnerability
• Fixed SVG file copy vulnerability

• Fix loading of different kinds of data sources

• Fix map.destroy() method

• (Pro only) Filters for WP CPT
• (Pro only) Dynamic markers by WP CPT field values

• Fix clustering

• Fix Handlebars WP shortcode rendering

• Fix "select" field editing
• Fix shortcode rending function (for mapsvg templates)

• Fix filter tags (show clickable filter tags when filters are hidden)
• Fix search by regions

• Fix clicking on links in SVG
• Fix broken options in 8.5.37

• Fix plugin activation issues

• Fix shortcode rendering in the templates

• Add "mapsvg_format_post_data" filter
• Improve upgrading scripts from old MapSVG versions
• Fix flush_rewrite_rules issues

• Change "Upgrade to Pro" links to mapsvg.com/pricing

• Fix handle click on HTML links in SVG files
• Fix duplicate map feature
• Fix on mobile devices, on directory item click - properly fit markers on google maps
• Fix keep text search field state on database fetch, when filters are located in directory

• Fix invisible settings tabs in the Map Editor
• Fix the flush_rewrite_rules() execution issues
• Defer JS scripts loading

• Fix zero header/footer size, when used with details view

• Fix mobile buttons list/map

• Fixed: show popover on directory item click

• Fixed: filters not working properlywhen "search" button is added to the form

• Fix filters

• Fix tables creation on plugin activation

• Fix tables creation on plugin activation
• Fix viewBox reset to initial value

• Fix pagination

• Limit zoom levels to 1-22 (same as Google Maps)

• Fix reloading filters state on directory redraw

• Adjust Australia SVG map for better region label placement