Connect Polylang for Elementor Security & Risk Analysis

wordpress.org/plugins/connect-polylang-elementor

Connect Polylang with Elementor: translated templates, language switcher widget, language visibility conditions and more

100K active installs v2.5.5 PHP 5.6+ WP 5.4+ Updated Dec 31, 2025
dynamic-tagselementorlanguage-switchermultilingualpolylang
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Connect Polylang for Elementor Safe to Use in 2026?

Generally Safe

Score 100/100

Connect Polylang for Elementor has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The connect-polylang-elementor plugin v2.5.5 exhibits a strong security posture based on the provided static analysis. The complete absence of vulnerable code signals such as dangerous functions, raw SQL queries, and unescaped output is highly commendable. Furthermore, the plugin demonstrates good practices with a high percentage of properly escaped outputs and the presence of capability checks. The vulnerability history being entirely clean further reinforces this positive assessment, suggesting a well-maintained and secure plugin.

Key Concerns

  • Flows with unsanitized paths found
  • File operations detected without context
  • Zero nonce checks on potential entry points
Vulnerabilities
None known

Connect Polylang for Elementor Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Connect Polylang for Elementor Release Timeline

v2.5.5Current
v2.5.4
v2.5.3
v2.5.2
v2.5.1
v2.5.0
v2.4.7
v2.4.6
v2.4.5
v2.4.4
v2.4.3
v2.4.2
v2.4.1
v2.4.0
v2.3.5
v2.3.4
v2.3.3
v2.3.2
v2.3.1
v2.3.0
Code Analysis
Analyzed Mar 16, 2026

Connect Polylang for Elementor Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
37 escaped
Nonce Checks
0
Capability Checks
1
File Operations
1
External Requests
0
Bundled Libraries
0

Output Escaping

97% escaped38 total outputs
Data Flows · Security
1 unsanitized

Data Flow Analysis

1 flows1 with unsanitized paths
<connect-plugins> (includes\connect-plugins.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Connect Polylang for Elementor Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 54
actionplugins_loadedconnect-polylang-elementor.php:79
filterplugins_urlconnect-polylang-elementor.php:82
filterpll_contextconnect-polylang-elementor.php:83
filterplugin_row_metaincludes\admin-extras.php:21
filterdisplay_post_statesincludes\admin-extras.php:23
filterpll_get_post_typesincludes\connect-plugins.php:29
filterelementor/theme/get_location_templates/template_idincludes\connect-plugins.php:32
filterelementor/theme/get_location_templates/condition_sub_idincludes\connect-plugins.php:33
filterpre_do_shortcode_tagincludes\connect-plugins.php:36
actionelementor/frontend/widget/before_renderincludes\connect-plugins.php:38
filterwidget_display_callbackincludes\connect-plugins.php:40
filteroption_elementor_active_kitincludes\connect-plugins.php:43
filterpll_home_url_white_listincludes\connect-plugins.php:46
filterhome_urlincludes\connect-plugins.php:47
filteroption_elementor_woocommerce_purchase_summary_page_idincludes\connect-plugins.php:50
actionelementor/frontend/widget/before_renderincludes\connect-plugins.php:53
actionelementor/frontend/widget/after_renderincludes\connect-plugins.php:54
actionparse_queryincludes\connect-plugins.php:59
filterget_post_metadataincludes\connect-plugins.php:62
filterpre_update_option_elementor_pro_theme_builder_conditionsincludes\connect-plugins.php:63
actionmanage_elementor_library_posts_custom_columnincludes\connect-plugins.php:66
actionmanage_elementor_library_posts_custom_columnincludes\connect-plugins.php:67
actionset_object_termsincludes\connect-plugins.php:71
actionmanage_elementor_library_posts_custom_columnincludes\connect-plugins.php:74
actionmanage_elementor_library_posts_custom_columnincludes\connect-plugins.php:75
filterupdate_post_metadataincludes\connect-plugins.php:79
actionpll_post_synchronizedincludes\connect-plugins.php:80
filterpost_row_actionsincludes\connect-plugins.php:85
filterpage_row_actionsincludes\connect-plugins.php:86
filterelementor/document/urls/editincludes\connect-plugins.php:88
actionelementor/documents/register_controlsincludes\connect-plugins.php:95
actionelementor/editor/after_enqueue_scriptsincludes\connect-plugins.php:99
actionelementor/editor/after_enqueue_stylesincludes\connect-plugins.php:101
filterelementor-pro/site-editor/data/templateincludes\connect-plugins.php:104
filterhome_urlincludes\connect-plugins.php:601
actioninitincludes\elementor-assets.php:30
actionadmin_initincludes\elementor-assets.php:31
filterscript_loader_srcincludes\elementor-assets.php:73
filterstyle_loader_srcincludes\elementor-assets.php:74
filterallowed_http_originsincludes\elementor-assets.php:76
filteradmin_urlincludes\elementor-assets.php:78
filterwp_get_attachment_image_attributesincludes\elementor-assets.php:79
filterelementor/editor/localize_settingsincludes\elementor-assets.php:81
actionelementor/preview/enqueue_stylesincludes\language-visibility.php:21
actionelementor/element/section/section_advanced/after_section_endincludes\language-visibility.php:25
actionelementor/element/column/section_advanced/after_section_endincludes\language-visibility.php:26
actionelementor/element/container/section_layout/after_section_endincludes\language-visibility.php:27
actionelementor/element/common/_section_style/after_section_endincludes\language-visibility.php:28
filterelementor/frontend/section/should_renderincludes\language-visibility.php:32
filterelementor/frontend/column/should_renderincludes\language-visibility.php:33
filterelementor/frontend/container/should_renderincludes\language-visibility.php:34
filterelementor/frontend/widget/should_renderincludes\language-visibility.php:35
filterelementor/element/is_dynamic_contentincludes\language-visibility.php:37
actionelementor/frontend/after_enqueue_stylesincludes\widgets\manager.php:25
Maintenance & Trust

Connect Polylang for Elementor Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 31, 2025
PHP min version5.6
Downloads2.1M

Community Trust

Rating96/100
Number of ratings50
Active installs100K
Developer Profile

Connect Polylang for Elementor Developer Profile

David Decker

1 plugin · 100K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Connect Polylang for Elementor

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/connect-polylang-elementor/includes/admin-extras.css/wp-content/plugins/connect-polylang-elementor/assets/css/connect-polylang-elementor-public.css/wp-content/plugins/connect-polylang-elementor/assets/js/connect-polylang-elementor-public.js
Version Parameters
connect-polylang-elementor/assets/css/connect-polylang-elementor-public.css?ver=connect-polylang-elementor/assets/js/connect-polylang-elementor-public.js?ver=

HTML / DOM Fingerprints

CSS Classes
cpel-template-language-column
Data Attributes
data-cpel-language
JS Globals
CPEL_ELEMENTOR_DATA
FAQ

Frequently Asked Questions about Connect Polylang for Elementor