Easy Elementor Addons – Addons Pack for Elementor Page Builder Security & Risk Analysis

wordpress.org/plugins/easy-elementor-addons

Level up with Easy Elementor Addons – adds powerful widgets and sleek design tools to your favorite Elementor page builder.

1K active installs v2.3.5 PHP 7.2+ WP 6.3+ Updated Mar 18, 2026
elementorelementor-addonselementor-extensionselementor-templateselementor-widgets
94
A · Safe
CVEs total7
Unpatched0
Last CVEOct 2, 2025
Safety Verdict

Is Easy Elementor Addons – Addons Pack for Elementor Page Builder Safe to Use in 2026?

Generally Safe

Score 94/100

Easy Elementor Addons – Addons Pack for Elementor Page Builder has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

7 known CVEsLast CVE: Oct 2, 2025Updated 2mo ago
Risk Assessment

The "easy-elementor-addons" v2.3.4 plugin exhibits a mixed security posture. While it demonstrates good practices in several areas, such as 100% SQL queries using prepared statements and a high percentage of properly escaped output, significant concerns remain. The static analysis reveals a notable attack surface, with one of the five AJAX handlers lacking proper authentication checks. This unprotected entry point could be a prime target for unauthenticated attackers seeking to exploit potential vulnerabilities. The absence of taint analysis results is a weakness, as it limits a deeper understanding of potential data sanitization issues.

Key Concerns

  • Unprotected AJAX handler found
  • Significant vulnerability history (7 CVEs)
  • History of medium severity vulnerabilities
  • History of XSS and RFI vulnerabilities
  • History of Missing Authorization vulnerabilities
  • Limited taint analysis reported
Vulnerabilities
7 published

Easy Elementor Addons – Addons Pack for Elementor Page Builder Security Vulnerabilities

CVEs by Year

7 CVEs in 2025
2025
Patched Has unpatched

Severity Breakdown

High
1
Medium
6

7 total CVEs

CVE-2025-9045medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Easy Elementor Addons <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Oct 2, 2025 Patched in 2.3.0 (35d)
CVE-2025-58973high · 7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Easy Elementor Addons <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion

Sep 22, 2025 Patched in 2.2.9 (5d)
CVE-2025-54712medium · 4.3Missing Authorization

Easy Elementor Addons <= 2.2.7 - Missing Authorization

Aug 14, 2025 Patched in 2.2.8 (5d)
CVE-2025-54704medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Easy Elementor Addons <= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jul 30, 2025 Patched in 2.2.7 (6d)
CVE-2025-48295medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Easy Elementor Addons <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jul 16, 2025 Patched in 2.2.6 (6d)
CVE-2025-26912medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Easy Elementor Addons <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Feb 23, 2025 Patched in 2.1.7 (9d)
CVE-2025-26761medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Easy Elementor Addons <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Feb 14, 2025 Patched in 2.1.6 (5d)
Version History

Easy Elementor Addons – Addons Pack for Elementor Page Builder Release Timeline

Code Analysis
Analyzed Mar 16, 2026

Easy Elementor Addons – Addons Pack for Elementor Page Builder Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
27
846 escaped
Nonce Checks
2
Capability Checks
7
File Operations
2
External Requests
6
Bundled Libraries
0

Output Escaping

97% escaped873 total outputs
Attack Surface
1 unprotected

Easy Elementor Addons – Addons Pack for Elementor Page Builder Attack Surface

Entry Points5
Unprotected1

AJAX Handlers 5

authwp_ajax_admin_settings_saveinc\admin-menu\admin-menu-class.php:11
authwp_ajax_eead_widgets_saveinc\admin-menu\admin-menu-class.php:12
authwp_ajax_eead_get_templatestemplates\classes\manager.php:32
authwp_ajax_eead_inner_templatetemplates\classes\manager.php:33
authwp_ajax_elementor_get_template_datatemplates\classes\manager.php:38
WordPress Hooks 23
actionelementor/widgets/widgets_registeredbase\module-base.php:45
actionplugins_loadedeasy-elementor-addons.php:50
actionadmin_noticeseasy-elementor-addons.php:58
actionadmin_menuinc\admin-menu\admin-menu-class.php:14
actionadmin_enqueue_scriptsinc\admin-menu\admin-menu-class.php:15
filterelementor/icons_manager/additional_tabsinc\icon-manager.php:26
actionelementor/element/container/section_effects/before_section_endinc\sticky-container.php:26
actionelementor/initinc\widget-loader.php:68
actionelementor/controls/controls_registeredinc\widget-loader.php:71
actionelementor/frontend/before_register_scriptsinc\widget-loader.php:74
actionelementor/frontend/after_enqueue_scriptsinc\widget-loader.php:75
actionelementor/frontend/before_register_stylesinc\widget-loader.php:78
actionelementor/frontend/after_enqueue_stylesinc\widget-loader.php:79
actionelementor/editor/before_enqueue_scriptsinc\widget-loader.php:82
actionelementor/editor/after_enqueue_stylesinc\widget-loader.php:85
actionelementor/preview/enqueue_stylesinc\widget-loader.php:88
actionelementor/preview/enqueue_stylestemplates\classes\assets.php:35
actionelementor/editor/before_enqueue_scriptstemplates\classes\assets.php:36
actionelementor/editor/after_enqueue_stylestemplates\classes\assets.php:37
actionelementor/editor/footertemplates\classes\assets.php:38
actionelementor/ajax/register_actionstemplates\classes\manager.php:36
filtereead-addons-core/assets/editor/localizetemplates\classes\manager.php:42
actioninittemplates\templates.php:22
Maintenance & Trust

Easy Elementor Addons – Addons Pack for Elementor Page Builder Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 18, 2026
PHP min version7.2
Downloads21K

Community Trust

Rating0/100
Number of ratings0
Active installs1K
Developer Profile

Easy Elementor Addons – Addons Pack for Elementor Page Builder Developer Profile

hashthemes

19 plugins · 66K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
91 days
View full developer profile
Detection Fingerprints

How We Detect Easy Elementor Addons – Addons Pack for Elementor Page Builder

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/easy-elementor-addons/assets/css/eead-admin-menu.css/wp-content/plugins/easy-elementor-addons/assets/fonts/materialdesignicons/materialdesignicons.css/wp-content/plugins/easy-elementor-addons/assets/fonts/eeaddons/eeaddons.css/wp-content/plugins/easy-elementor-addons/assets/js/admin.js
Version Parameters
easy-elementor-addons/assets/css/eead-admin-menu.css?ver=easy-elementor-addons/assets/fonts/materialdesignicons/materialdesignicons.css?ver=easy-elementor-addons/assets/fonts/eeaddons/eeaddons.css?ver=easy-elementor-addons/assets/js/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
eead-admin-menu
Data Attributes
data-nonce
JS Globals
admin_ajax_script
FAQ

Frequently Asked Questions about Easy Elementor Addons – Addons Pack for Elementor Page Builder