Does Essential Addons for Elementor – Popular Elementor Templates & Widgets have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Essential Addons for Elementor – Popular Elementor Templates & Widgets Security & Risk Analysis

wordpress.org/plugins/essential-addons-for-elementor-lite

Elementor addon offering 110+ widgets and templates — Elementor Gallery, Slider, Form, Post Grid, Menu, Accordion, WooCommerce & more.

2.0M active installs v6.6.1 PHP 7.0+ WP 5.0+ Updated Apr 15, 2026

elementorelementor-addonselementor-templateselementor-widgetselementor-woocommerce

B · Generally Safe

CVEs total59

Unpatched0

Last CVEMay 13, 2026

Plugin page Download

Safety Verdict

Is Essential Addons for Elementor – Popular Elementor Templates & Widgets Safe to Use in 2026?

Mostly Safe

Score 76/100

Essential Addons for Elementor – Popular Elementor Templates & Widgets is generally safe to use. 59 past CVEs were resolved.

59 known CVEsLast CVE: May 13, 2026Updated 1mo ago

Risk Assessment

Essential Addons for Elementor Lite v6.5.13 presents a mixed security posture. While the plugin demonstrates good practices with a high percentage of SQL queries using prepared statements and a significant majority of outputs being properly escaped, there are notable concerns. The presence of 14 unprotected AJAX handlers is a significant weakness, creating a large attack surface that could be exploited by unauthenticated users. The use of the `unserialize` function, a known dangerous function, also warrants caution. The plugin's vulnerability history is concerning, with a substantial number of known CVEs, including critical and high-severity issues. Although there are currently no unpatched vulnerabilities, the sheer volume and recurring types of past vulnerabilities (Missing Authorization, XSS, Deserialization) suggest a pattern of security weaknesses that require vigilant monitoring and prompt patching. The plugin has a relatively large attack surface with a notable proportion of unprotected entry points, which is a primary concern. The taint analysis, while showing no critical or high severity flows, still identified unsanitized paths, which could potentially lead to vulnerabilities if not addressed.

Key Concerns

14 unprotected AJAX handlers
Use of 'unserialize' dangerous function
3 unsanitized paths in taint analysis
56 total known CVEs
2 critical severity CVEs in history
5 high severity CVEs in history
Frequent past vulnerability types (auth, XSS, deserialization)

Vulnerabilities

59 published

Essential Addons for Elementor – Popular Elementor Templates & Widgets Security Vulnerabilities

CVEs by Year

3 CVEs in 2021

2021

2 CVEs in 2022

2022

3 CVEs in 2023

2023

35 CVEs in 2024

2024

11 CVEs in 2025

2025

5 CVEs in 2026

2026

Patched Has unpatched

Severity Breakdown

Critical

High

Medium

59 total CVEs

CVE-2026-5193medium · 6.5Improper Privilege Management

Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user

May 13, 2026 Patched in 6.6.0 (1d)

CVE-2026-25440medium · 5.3Missing Authorization

Essential Addons for Elementor – Popular Elementor Templates & Widgets < 6.6.0 - Missing Authorization

Apr 22, 2026 Patched in 6.6.0 (9d)

CVE-2026-1512medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget

Feb 13, 2026 Patched in 6.5.10 (1d)

CVE-2026-1004medium · 5.3Missing Authorization

Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure

Jan 15, 2026 Patched in 6.5.6 (1d)

CVE-2025-69092medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jan 6, 2026 Patched in 6.5.4 (8d)

CVE-2025-13977medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Dec 16, 2025 Patched in 6.5.4 (1d)

CVE-2026-23543medium · 5.3Missing Authorization

Essential Addons for Elementor <= 6.5.5 - Missing Authorization

Nov 18, 2025 Patched in 6.5.6 (168d)

CVE-2025-64352medium · 4.3Missing Authorization

Essential Addons for Elementor <= 6.2.4 - Missing Authorization

Sep 17, 2025 Patched in 6.3.0 (49d)

CVE-2025-8451medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'

Aug 14, 2025 Patched in 6.2.3 (1d)

CVE-2025-6244medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets

Jul 7, 2025 Patched in 6.1.20 (1d)

CVE-2024-5647medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library

Jul 2, 2025 Patched in 6.0.5 (49d)

CVE-2024-9993medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget

Jun 6, 2025 Patched in 6.1.13 (1d)

CVE-2024-9994medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget

Jun 6, 2025 Patched in 6.1.13 (1d)

CVE-2025-39589medium · 4.3Exposure of Sensitive Information to an Unauthorized Actor

Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Information Disclosure

Apr 16, 2025 Patched in 6.1.10 (7d)

CVE-2025-39590medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Apr 16, 2025 Patched in 6.1.10 (7d)

CVE-2025-24752medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor <= 6.0.14 - Reflected Cross-Site Scripting

Feb 4, 2025 Patched in 6.0.15 (78d)

CVE-2024-56063medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Dec 18, 2024 Patched in 6.0.8 (22d)

CVE-2024-8961medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Nov 14, 2024 Patched in 6.0.8 (1d)

CVE-2024-8979high · 8Exposure of Sensitive Information to an Unauthorized Actor

Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation

Nov 14, 2024 Patched in 6.0.10 (1d)

CVE-2024-8978medium · 5.7Exposure of Sensitive Information to an Unauthorized Actor

Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure

Nov 14, 2024 Patched in 6.0.10 (1d)

CVE-2024-8742medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget

Sep 12, 2024 Patched in 6.0.4 (1d)

CVE-2024-8440medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget

Sep 10, 2024 Patched in 6.0.4 (1d)

CVE-2024-7092medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter

Aug 12, 2024 Patched in 6.0.0 (1d)

CVE-2024-39649medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor <= 5.9.26 - Authenticated (Contributor+) Stored Cross-Site Scripting

Aug 1, 2024 Patched in 5.9.27 (7d)

CVE-2024-5189medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jun 10, 2024 Patched in 5.9.24 (2d)

CVE-2024-5188medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jun 5, 2024 Patched in 5.9.23 (1d)

CVE-2024-5073medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed

May 29, 2024 Patched in 5.9.22 (1d)

CVE-2024-34764medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting

May 17, 2024 Patched in 5.9.16 (4d)

CVE-2024-4624medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site Scripting

May 13, 2024 Patched in 5.9.21 (1d)

CVE-2024-4448medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table'

May 9, 2024 Patched in 5.9.20 (168d)

CVE-2024-4275medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles'

May 9, 2024 Patched in 5.9.20 (1d)

CVE-2024-4449medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor <= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets

May 9, 2024 Patched in 5.9.20 (1d)

CVE-2024-4156medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.17 - Authenticated (Contributor+) Stored Cross-Site Scripting

Apr 30, 2024 Patched in 5.9.18 (3d)

CVE-2024-4003medium · 6.4Improper Input Validation

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting

Apr 24, 2024 Patched in 5.9.16 (9d)

CVE-2024-3728medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle

Apr 24, 2024 Patched in 5.9.16 (9d)

CVE-2024-3733medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure

Apr 24, 2024 Patched in 5.9.16 (1d)

CVE-2024-3333medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute

Apr 16, 2024 Patched in 5.9.15 (1d)

CVE-2024-3018high · 8.8Deserialization of Untrusted Data

Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword

Mar 29, 2024 Patched in 5.9.14 (1d)

CVE-2024-2974medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure

Mar 29, 2024 Patched in 5.9.14 (12d)

CVE-2024-2650medium · 6.4Improper Input Validation

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

Mar 25, 2024 Patched in 5.9.12 (16d)

CVE-2024-2623medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

Mar 25, 2024 Patched in 5.9.12 (16d)

CVE-2024-1536high · 7.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar

Mar 11, 2024 Patched in 5.9.10 (3d)

CVE-2024-1537medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table

Mar 11, 2024 Patched in 5.9.10 (3d)

CVE-2024-1236medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Feb 12, 2024 Patched in 5.9.9 (9d)

CVE-2024-1276medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Feb 12, 2024 Patched in 5.9.9 (110d)

CVE-2024-1172medium · 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion

Feb 12, 2024 Patched in 5.9.9 (9d)

CVE-2024-1171medium · 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery

Feb 12, 2024 Patched in 5.9.9 (9d)

CVE-2024-0954medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Feb 1, 2024 Patched in 5.9.8 (5d)

CVE-2024-0585medium · 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl

Jan 17, 2024 Patched in 5.9.5 (195d)

CVE-2024-0586medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritping

Jan 17, 2024 Patched in 5.9.5 (282d)

CVE-2023-7044medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jan 3, 2024 Patched in 5.9.3 (209d)

CVE-2023-41955high · 8.8Missing Authorization

Essential Addons for Elementor <= 5.8.8 - Authenticated (Contributor+) Privilege Escalation

Sep 14, 2023 Patched in 5.8.9 (131d)

CVE-2023-3779medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure

Jul 19, 2023 Patched in 5.8.2 (188d)

CVE-2023-32243critical · 9.8Unverified Password Change

Essential Addons for Elementor <= 5.7.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation

May 11, 2023 Patched in 5.7.2 (257d)

CVE-2022-0683medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor Lite <= 5.0.8 - Reflected Cross-Site Scripting

Feb 18, 2022 Patched in 5.0.9 (704d)

CVE-2022-0320critical · 9.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Essential Addons for Elementor <= 5.0.4 - Local File Inclusion

Jan 21, 2022 Patched in 5.0.5 (732d)

CVE-2021-4446medium · 6.3Missing Authorization

Essential Addons for Elementor <= 4.6.4 - Missing Authorization

May 5, 2021 Patched in 4.6.5 (1260d)

CVE-2021-4447high · 8.8Missing Authorization

Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation

May 5, 2021 Patched in 4.6.5 (1260d)

CVE-2021-24255medium · 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Essential Addons for Elementor Lite <= 4.5.3 - Cross-Site Scripting

Apr 13, 2021 Patched in 4.5.4 (1015d)

Version History

Essential Addons for Elementor – Popular Elementor Templates & Widgets Release Timeline

v6.6.1Current

v6.6.0

v6.5.132 CVEs18 files changed

CVE-2026-25440 CVE-2026-5193

v6.5.122 CVEs51 files changed

CVE-2026-25440 CVE-2026-5193

v6.5.112 CVEs6 files changed

CVE-2026-25440 CVE-2026-5193

v6.5.102 CVEs111 files changed

CVE-2026-25440 CVE-2026-5193

v6.5.93 CVEs25 files changed

CVE-2026-1512 CVE-2026-25440 CVE-2026-5193

v6.5.83 CVEs7 files changed

CVE-2026-1512 CVE-2026-25440 CVE-2026-5193

v6.5.73 CVEs5 files changed

CVE-2026-1512 CVE-2026-25440 CVE-2026-5193

v6.5.63 CVEs21 files changed

CVE-2026-1512 CVE-2026-25440 CVE-2026-5193

v6.5.55 CVEs107 files changed

CVE-2026-1004 CVE-2026-1512 CVE-2026-23543 +2 more

v6.5.45 CVEs19 files changed

CVE-2026-1004 CVE-2026-1512 CVE-2026-23543 +2 more

v6.5.37 CVEs6 files changed

CVE-2026-1004 CVE-2025-69092 CVE-2025-13977 +4 more

v6.5.27 CVEs7 files changed

CVE-2026-1004 CVE-2025-69092 CVE-2025-13977 +4 more

v6.5.17 CVEs6 files changed

CVE-2026-1004 CVE-2025-69092 CVE-2025-13977 +4 more

v6.5.07 CVEs47 files changed

CVE-2026-1004 CVE-2025-69092 CVE-2025-13977 +4 more

v6.4.07 CVEs86 files changed

CVE-2026-1004 CVE-2025-69092 CVE-2025-13977 +4 more

v6.3.37 CVEs27 files changed

CVE-2026-1004 CVE-2025-69092 CVE-2025-13977 +4 more

v6.3.27 CVEs79 files changed

CVE-2026-1004 CVE-2025-69092 CVE-2025-13977 +4 more

v6.3.17 CVEs18 files changed

CVE-2026-1004 CVE-2025-69092 CVE-2025-13977 +4 more

Code Analysis

Analyzed Mar 16, 2026

Essential Addons for Elementor – Popular Elementor Templates & Widgets Code Analysis

Dangerous Functions

Raw SQL Queries

14 prepared

Unescaped Output

327

3012 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Dangerous Functions Found

unserializereturn unserialize(wp_remote_retrieve_body($response));includes\Classes\WPDeveloper_Plugin_Installer.php:76

Bundled Libraries

Select2

SQL Query Safety

93% prepared15 total queries

Output Escaping

90% escaped3339 total outputs

Data Flows · Security

3 unsanitized

Data Flow Analysis

25 flows3 with unsanitized paths

send_data (includes\Classes\Plugin_Usage_Tracker.php:442)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

14 unprotected

Essential Addons for Elementor – Popular Elementor Templates & Widgets Attack Surface

Entry Points37

Unprotected14

AJAX Handlers 37

authwp_ajax_facebook_feed_load_moreincludes\Classes\Bootstrap.php:158

noprivwp_ajax_facebook_feed_load_moreincludes\Classes\Bootstrap.php:159

noprivwp_ajax_eael_product_gridincludes\Classes\Bootstrap.php:162

authwp_ajax_eael_product_gridincludes\Classes\Bootstrap.php:163

authwp_ajax_eael_clear_widget_cache_dataincludes\Classes\Bootstrap.php:165

authwp_ajax_templately_promo_statusincludes\Classes\Bootstrap.php:222

authwp_ajax_eael_checkout_cart_qty_updateincludes\Classes\Bootstrap.php:237

noprivwp_ajax_eael_checkout_cart_qty_updateincludes\Classes\Bootstrap.php:238

authwp_ajax_wpdeveloper_auto_active_even_not_installedincludes\Classes\WPDeveloper_Plugin_Installer.php:13

authwp_ajax_wpdeveloper_install_pluginincludes\Classes\WPDeveloper_Plugin_Installer.php:14

authwp_ajax_wpdeveloper_upgrade_pluginincludes\Classes\WPDeveloper_Plugin_Installer.php:15

authwp_ajax_wpdeveloper_activate_pluginincludes\Classes\WPDeveloper_Plugin_Installer.php:16

authwp_ajax_wpdeveloper_deactivate_pluginincludes\Classes\WPDeveloper_Plugin_Installer.php:17

authwp_ajax_save_setup_wizard_dataincludes\Classes\WPDeveloper_Setup_Wizard.php:22

authwp_ajax_enable_wpins_processincludes\Classes\WPDeveloper_Setup_Wizard.php:23

authwp_ajax_save_eael_elements_dataincludes\Classes\WPDeveloper_Setup_Wizard.php:24

authwp_ajax_load_moreincludes\Traits\Ajax_Handler.php:34

noprivwp_ajax_load_moreincludes\Traits\Ajax_Handler.php:35

authwp_ajax_woo_product_pagination_productincludes\Traits\Ajax_Handler.php:37

noprivwp_ajax_woo_product_pagination_productincludes\Traits\Ajax_Handler.php:38

authwp_ajax_woo_product_paginationincludes\Traits\Ajax_Handler.php:40

noprivwp_ajax_woo_product_paginationincludes\Traits\Ajax_Handler.php:41

authwp_ajax_eael_product_add_to_cartincludes\Traits\Ajax_Handler.php:43

noprivwp_ajax_eael_product_add_to_cartincludes\Traits\Ajax_Handler.php:44

authwp_ajax_woo_checkout_update_order_reviewincludes\Traits\Ajax_Handler.php:46

noprivwp_ajax_woo_checkout_update_order_reviewincludes\Traits\Ajax_Handler.php:47

noprivwp_ajax_eael_product_quickview_popupincludes\Traits\Ajax_Handler.php:49

authwp_ajax_eael_product_quickview_popupincludes\Traits\Ajax_Handler.php:50

noprivwp_ajax_eael_product_galleryincludes\Traits\Ajax_Handler.php:52

authwp_ajax_eael_product_galleryincludes\Traits\Ajax_Handler.php:53

authwp_ajax_eael_select2_search_postincludes\Traits\Ajax_Handler.php:55

authwp_ajax_eael_select2_get_titleincludes\Traits\Ajax_Handler.php:56

authwp_ajax_eael_save_settings_with_ajaxincludes\Traits\Ajax_Handler.php:59

authwp_ajax_eael_clear_cache_files_with_ajaxincludes\Traits\Ajax_Handler.php:60

authwp_ajax_eael_admin_promotionincludes\Traits\Ajax_Handler.php:61

authwp_ajax_eael_get_tokenincludes\Traits\Ajax_Handler.php:64

noprivwp_ajax_eael_get_tokenincludes\Traits\Ajax_Handler.php:65

WordPress Hooks 201

actionplugins_loadedessential_adons_elementor.php:52

actionwp_loadedessential_adons_elementor.php:63

actionupgrader_process_completeessential_adons_elementor.php:99

actionwp_loadedessential_adons_elementor.php:106

actionbefore_woocommerce_initessential_adons_elementor.php:122

actionin_admin_headerincludes\bfcm-pointer.php:6

actionadmin_initincludes\bfcm-pointer.php:65

actionwp_footerincludes\Classes\Asset_Builder.php:100

actionwp_footerincludes\Classes\Asset_Builder.php:101

actionafter_delete_postincludes\Classes\Asset_Builder.php:102

actionwp_enqueue_scriptsincludes\Classes\Asset_Builder.php:104

actionelementor/frontend/before_enqueue_stylesincludes\Classes\Asset_Builder.php:105

actionelementor/theme/register_locationsincludes\Classes\Asset_Builder.php:106

filterelementor/files/file_nameincludes\Classes\Asset_Builder.php:107

actioninitincludes\Classes\Bootstrap.php:118

actioninitincludes\Classes\Bootstrap.php:140

filtereael/active_pluginsincludes\Classes\Bootstrap.php:142

filtereael/is_plugin_activeincludes\Classes\Bootstrap.php:144

actionelementor/editor/after_saveincludes\Classes\Bootstrap.php:145

actiontrashed_postincludes\Classes\Bootstrap.php:146

actioneael/before_enqueue_stylesincludes\Classes\Bootstrap.php:149

actionelementor/editor/before_enqueue_scriptsincludes\Classes\Bootstrap.php:150

actionelementor/frontend/before_register_scriptsincludes\Classes\Bootstrap.php:151

actionelementor/controls/registerincludes\Classes\Bootstrap.php:169

actionelementor/widgets/registerincludes\Classes\Bootstrap.php:170

actionelementor/controls/controls_registeredincludes\Classes\Bootstrap.php:172

actionelementor/widgets/widgets_registeredincludes\Classes\Bootstrap.php:173

actionelementor/elements/categories_registeredincludes\Classes\Bootstrap.php:178

filterelementor/editor/localize_settingsincludes\Classes\Bootstrap.php:179

actionwp_footerincludes\Classes\Bootstrap.php:180

actionwp_footerincludes\Classes\Bootstrap.php:181

actioneael/controls/queryincludes\Classes\Bootstrap.php:184

actioneael/controls/betterdocs/queryincludes\Classes\Bootstrap.php:185

actioneael/controls/layoutincludes\Classes\Bootstrap.php:186

actioneael/controls/terms_styleincludes\Classes\Bootstrap.php:187

actioneael/controls/read_more_button_styleincludes\Classes\Bootstrap.php:188

actioneael/controls/load_more_button_styleincludes\Classes\Bootstrap.php:189

actioneael/controls/custom_positioningincludes\Classes\Bootstrap.php:190

actioneael/controls/nothing_found_styleincludes\Classes\Bootstrap.php:191

filtereael/controls/event-calendar/sourceincludes\Classes\Bootstrap.php:193

actioneael/controls/advanced-data-table/sourceincludes\Classes\Bootstrap.php:194

actioninitincludes\Classes\Bootstrap.php:197

filterwp_new_user_notification_emailincludes\Classes\Bootstrap.php:198

filterwp_new_user_notification_email_adminincludes\Classes\Bootstrap.php:199

actioninitincludes\Classes\Bootstrap.php:200

actionshow_user_profileincludes\Classes\Bootstrap.php:203

actionedit_user_profileincludes\Classes\Bootstrap.php:204

actionpersonal_options_updateincludes\Classes\Bootstrap.php:206

actionedit_user_profile_updateincludes\Classes\Bootstrap.php:207

filterrank_math/researches/toc_pluginsincludes\Classes\Bootstrap.php:211

actionelementor/editor/before_enqueue_scriptsincludes\Classes\Bootstrap.php:219

actioneael/before_enqueue_stylesincludes\Classes\Bootstrap.php:220

actionelementor/editor/footerincludes\Classes\Bootstrap.php:221

actioneael_woo_single_product_imageincludes\Classes\Bootstrap.php:227

actioneael_woo_single_product_summaryincludes\Classes\Bootstrap.php:228

actioneael_woo_single_product_summaryincludes\Classes\Bootstrap.php:229

actioneael_woo_single_product_summaryincludes\Classes\Bootstrap.php:230

actioneael_woo_single_product_summaryincludes\Classes\Bootstrap.php:231

actioneael_woo_single_product_summaryincludes\Classes\Bootstrap.php:232

actioneael_woo_single_product_summaryincludes\Classes\Bootstrap.php:233

filtereael_product_wrapper_classincludes\Classes\Bootstrap.php:235

actionwp_loadedincludes\Classes\Bootstrap.php:240

filterwoocommerce_checkout_fieldsincludes\Classes\Bootstrap.php:241

actioneael_woo_before_product_loopincludes\Classes\Bootstrap.php:243

actioneael_woo_after_product_loopincludes\Classes\Bootstrap.php:254

actionwoocommerce_before_shop_loop_itemincludes\Classes\Bootstrap.php:259

actionwoocommerce_after_shop_loop_itemincludes\Classes\Bootstrap.php:260

actionwoocommerce_after_shop_loop_itemincludes\Classes\Bootstrap.php:266

actionwoocommerce_after_shop_loop_itemincludes\Classes\Bootstrap.php:268

filterwcml_multi_currency_ajax_actionsincludes\Classes\Bootstrap.php:277

actionadmin_initincludes\Classes\Bootstrap.php:288

actionadmin_menuincludes\Classes\Bootstrap.php:293

actionadmin_enqueue_scriptsincludes\Classes\Bootstrap.php:294

actionadmin_enqueue_scriptsincludes\Classes\Bootstrap.php:295

filterplugin_row_metaincludes\Classes\Bootstrap.php:299

actionadmin_noticesincludes\Classes\Bootstrap.php:305

actioneael_admin_noticesincludes\Classes\Bootstrap.php:306

actionin_admin_headerincludes\Classes\Bootstrap.php:309

actionadmin_initincludes\Classes\Bootstrap.php:312

actioninitincludes\Classes\Bootstrap.php:318

actioneael_admin_page_settingincludes\Classes\Bootstrap.php:322

filterelementor/document/save/dataincludes\Classes\Bootstrap.php:325

actionwpincludes\Classes\Bootstrap.php:360

filterbeehive_scriptsincludes\Classes\Bootstrap.php:364

actioninitincludes\Classes\Bootstrap.php:369

actioneael_mondialrelay_order_after_shippingincludes\Classes\Compatibility_Support.php:7

actionwoocommerce_review_order_after_shippingincludes\Classes\Compatibility_Support.php:39

actionelementor/editor/after_saveincludes\Classes\Elements_Manager.php:54

actioneael_woo_single_product_summaryincludes\Classes\Helper.php:1023

filterwoocommerce_add_to_cart_form_actionincludes\Classes\Helper.php:1066

actioneael_woo_before_product_loopincludes\Classes\Helper.php:1067

actioneael_after_clear_cache_filesincludes\Classes\Migration.php:75

actionadmin_footer-plugins.phpincludes\Classes\Plugin_Usage_Tracker.php:171

actioninitincludes\Classes\WPDeveloper_Core_Installer.php:25

actioninitincludes\Classes\WPDeveloper_Notice.php:112

actioninitincludes\Classes\WPDeveloper_Notice.php:114

actionadmin_noticesincludes\Classes\WPDeveloper_Notice.php:227

actioneael_admin_noticesincludes\Classes\WPDeveloper_Notice.php:228

actionadmin_noticesincludes\Classes\WPDeveloper_Notice.php:232

actioneael_admin_noticesincludes\Classes\WPDeveloper_Notice.php:233

actionadmin_enqueue_scriptsincludes\Classes\WPDeveloper_Setup_Wizard.php:20

actionadmin_menuincludes\Classes\WPDeveloper_Setup_Wizard.php:21

actionin_admin_headerincludes\Classes\WPDeveloper_Setup_Wizard.php:25

filterbody_classincludes\Elements\Login_Register.php:169

filterwoocommerce_product_add_to_cart_textincludes\Elements\Product_Grid.php:3703

actionwp_footerincludes\Elements\Product_Grid.php:4042

actionwp_footerincludes\Elements\Product_Grid.php:4055

filterwoocommerce_is_sold_individuallyincludes\Elements\Woo_Add_To_Cart.php:981

filterwoocommerce_product_single_add_to_cart_textincludes\Elements\Woo_Add_To_Cart.php:1078

filterbody_classincludes\Elements\Woo_Cart.php:52

actioneael_woocommerce_before_cart_collateralsincludes\Elements\Woo_Cart.php:59

actionwoocommerce_cart_collateralsincludes\Elements\Woo_Cart.php:62

actionwoocommerce_proceed_to_checkoutincludes\Elements\Woo_Cart.php:68

filterwc_empty_cart_messageincludes\Elements\Woo_Cart.php:2755

filterbody_classincludes\Elements\Woo_Checkout.php:41

actioneael_woo_checkout_before_renderincludes\Elements\Woo_Checkout.php:3162

actioneael_display_recurring_total_totalincludes\Elements\Woo_Checkout.php:3163

actioneael_wc_multistep_checkout_after_shippingincludes\Elements\Woo_Checkout.php:3189

filterwoocommerce_checkout_fieldsincludes\Elements\Woo_Checkout.php:3192

actionwp_footerincludes\Elements\Woo_Product_Carousel.php:3835

actionwp_footerincludes\Elements\Woo_Product_Carousel.php:3847

actionwp_footerincludes\Elements\Woo_Product_Gallery.php:3221

actionwp_footerincludes\Elements\Woo_Product_Gallery.php:3233

actionwp_footerincludes\Elements\Woo_Product_List.php:3746

actionwp_footerincludes\Elements\Woo_Product_List.php:3758

filterwoocommerce_product_add_to_cart_textincludes\Elements\Woo_Product_List.php:4074

actionelementor/documents/register_controlsincludes\Extensions\Custom_JS.php:14

actionelementor/element/common/_section_style/after_section_endincludes\Extensions\Hover_Effect.php:18

actionelementor/frontend/before_renderincludes\Extensions\Hover_Effect.php:19

actionelementor/element/column/section_advanced/after_section_endincludes\Extensions\Image_Masking.php:18

actionelementor/element/section/section_advanced/after_section_endincludes\Extensions\Image_Masking.php:19

actionelementor/element/container/section_layout/after_section_endincludes\Extensions\Image_Masking.php:20

actionelementor/element/common/_section_style/after_section_endincludes\Extensions\Image_Masking.php:21

actionelementor/frontend/before_renderincludes\Extensions\Image_Masking.php:22

actionwp_enqueue_scriptsincludes\Extensions\Image_Masking.php:23

filterelementor/document/element/replace_idincludes\Extensions\Image_Masking.php:24

actionelementor/element/container/section_layout/after_section_endincludes\Extensions\Liquid_Glass_Effect.php:20

actionelementor/element/column/section_advanced/after_section_endincludes\Extensions\Liquid_Glass_Effect.php:21

actionelementor/element/section/section_advanced/after_section_endincludes\Extensions\Liquid_Glass_Effect.php:22

actionelementor/element/common/_section_style/after_section_endincludes\Extensions\Liquid_Glass_Effect.php:23

actionelementor/frontend/before_renderincludes\Extensions\Liquid_Glass_Effect.php:24

filterelementor/widget/render_contentincludes\Extensions\Liquid_Glass_Effect.php:25

actionelementor/frontend/container/after_renderincludes\Extensions\Liquid_Glass_Effect.php:28

filteradmin_action_eae_duplicateincludes\Extensions\Post_Duplicator.php:12

actionadmin_bar_menuincludes\Extensions\Post_Duplicator.php:13

filterpost_row_actionsincludes\Extensions\Post_Duplicator.php:14

filterpage_row_actionsincludes\Extensions\Post_Duplicator.php:15

actionelementor/element/section/section_layout/after_section_endincludes\Extensions\Promotion.php:14

actionelementor/element/section/section_layout/after_section_endincludes\Extensions\Promotion.php:15

actionelementor/element/common/_section_style/after_section_endincludes\Extensions\Promotion.php:16

actionelementor/element/common/_section_style/after_section_endincludes\Extensions\Promotion.php:17

actionelementor/element/common/_section_style/after_section_endincludes\Extensions\Promotion.php:18

actionelementor/element/column/section_advanced/after_section_endincludes\Extensions\Promotion.php:19

actionelementor/element/section/section_advanced/after_section_endincludes\Extensions\Promotion.php:20

actionelementor/element/common/_section_style/after_section_endincludes\Extensions\Promotion.php:21

actionelementor/element/column/section_advanced/after_section_endincludes\Extensions\Promotion.php:22

actionelementor/element/common/_section_style/after_section_endincludes\Extensions\Promotion.php:25

actionelementor/element/column/section_advanced/after_section_endincludes\Extensions\Promotion.php:26

actionelementor/element/section/section_advanced/after_section_endincludes\Extensions\Promotion.php:27

actionelementor/element/container/section_layout/after_section_endincludes\Extensions\Promotion.php:28

actionelementor/documents/register_controlsincludes\Extensions\Promotion.php:29

actionelementor/documents/register_controlsincludes\Extensions\Reading_Progress.php:16

actionelementor/documents/register_controlsincludes\Extensions\Scroll_to_Top.php:17

actionelementor/documents/register_controlsincludes\Extensions\Table_of_Content.php:20

actionelementor/frontend/before_renderincludes\Extensions\Vertical_Text_Orientation.php:16

actionelementor/element/heading/section_title_style/after_section_endincludes\Extensions\Vertical_Text_Orientation.php:17

actionelementor/element/text-editor/section_style/after_section_endincludes\Extensions\Vertical_Text_Orientation.php:18

actionelementor/element/animated-headline/section_style_text/after_section_endincludes\Extensions\Vertical_Text_Orientation.php:19

actionelementor/element/eael-dual-color-header/eael_section_dch_title_style_settings/after_section_endincludes\Extensions\Vertical_Text_Orientation.php:20

actionelementor/element/eael-fancy-text/eael_fancy_text_suffix_styles/after_section_endincludes\Extensions\Vertical_Text_Orientation.php:21

actionelementor/element/common/_section_style/after_section_endincludes\Extensions\Wrapper_Link.php:18

actionelementor/element/column/section_advanced/after_section_endincludes\Extensions\Wrapper_Link.php:19

actionelementor/element/section/section_advanced/after_section_endincludes\Extensions\Wrapper_Link.php:20

actionelementor/element/container/section_layout/after_section_endincludes\Extensions\Wrapper_Link.php:21

actionelementor/frontend/before_renderincludes\Extensions\Wrapper_Link.php:22

actionwoocommerce_after_shop_loop_itemincludes\Template\Content\Product_Grid.php:105

actionwoocommerce_after_shop_loop_itemincludes\Template\Content\Woo_Product_List.php:114

actionwoocommerce_before_shop_loop_item_titleincludes\Template\Eicon-Woocommerce\default.php:85

filterwoocommerce_sale_flashincludes\Template\Eicon-Woocommerce\default.php:94

actionwoocommerce_after_shop_loop_itemincludes\Template\Eicon-Woocommerce\default.php:99

filtersingle_product_archive_thumbnail_sizeincludes\Template\Eicon-Woocommerce\default.php:107

filtersingle_product_archive_thumbnail_sizeincludes\Template\Eicon-Woocommerce\default.php:115

actionwoocommerce_before_checkout_formincludes\Template\Woocommerce\Checkout\Woo_Checkout_Helper.php:785

actionwoocommerce_before_checkout_formincludes\Template\Woocommerce\Checkout\Woo_Checkout_Helper.php:786

actionwoocommerce_before_checkout_formincludes\Template\Woocommerce\Checkout\Woo_Checkout_Helper.php:791

actionwoocommerce_checkout_billingincludes\Template\Woocommerce\Checkout\Woo_Checkout_Helper.php:800

actionwoocommerce_checkout_shippingincludes\Template\Woocommerce\Checkout\Woo_Checkout_Helper.php:804

actionwoocommerce_checkout_order_reviewincludes\Template\Woocommerce\Checkout\Woo_Checkout_Helper.php:810

filterwoocommerce_shipping_package_nameincludes\Template\Woocommerce\Checkout\Woo_Checkout_Helper.php:814

filterwp_script_attributesincludes\Traits\Admin.php:60

actioneael_before_woo_pagination_product_ajax_startincludes\Traits\Ajax_Handler.php:67

actioneael_before_ajax_load_moreincludes\Traits\Ajax_Handler.php:68

filterwoocommerce_is_checkoutincludes\Traits\Ajax_Handler.php:923

filteroption_yith_wcwl_ajax_enableincludes\Traits\Ajax_Handler.php:1603

filtercaldera_forms_force_enqueue_styles_earlyincludes\Traits\Enqueue.php:21

actionwp_footerincludes\Traits\Helper.php:228

filterwoocommerce_product_add_to_cart_textincludes\Traits\Helper.php:363

actionadmin_noticesincludes\Traits\Helper.php:598

filterretrieve_password_notification_emailincludes\Traits\Login_Registration.php:945

filterhttps_ssl_verifyincludes\Traits\Twitter_Feed.php:49

filterhttps_ssl_verifyincludes\Traits\Twitter_Feed.php:70

Maintenance & Trust

Essential Addons for Elementor – Popular Elementor Templates & Widgets Maintenance & Trust

Maintenance Signals

WordPress version tested7.0

Last updatedApr 15, 2026

PHP min version7.0

Downloads122.3M

Community Trust

Rating98/100

Number of ratings4,054

Active installs2.0M

Alternatives

Essential Addons for Elementor – Popular Elementor Templates & Widgets Alternatives

RTMKit

rometheme-for-elementor

All-in-one toolkit for Elementor: advanced addons, theme builder, forms, icons & templates to build stunning sites fast and easy.

50K 14 CVEs

Turbo Addons Elementor

turbo-addons-elementor

Turbo Addons for Elementor offers advanced widgets to enhance Elementor, helping you create professional, interactive websites easily and quickly.

2K 1 CVE

Essential Classy Addons – Widgets & Templates for Elementor

essential-classy-addons-for-elementor

100

Post Grid, Woocommerce builder Widgets. Slider, Carousel, Testimonial.A lightweight collection of ready-to-use widgets, templates, and extensions.

500 No CVEs

Selleradise Elements – Elementor Addons

selleradise-widgets

100

Selleradise Elements adds powerful Elementor widgets and WooCommerce integrations for beautiful, conversion-focused sites.

30 No CVEs

Premium Addons for Elementor – Powerful Elementor Templates & Widgets

premium-addons-for-elementor

Elementor Carousel, Mega Menu, Posts List/Slider, Media Gallery, WooCommerce Widgets, Display Conditions, Premade Templates & more.

700K 36 CVEs

Developer Profile

Essential Addons for Elementor – Popular Elementor Templates & Widgets Developer Profile

WPDeveloper

46 plugins · 4.0M total installs

trust score

Avg Security Score

90/100

Avg Patch Time

156 days

View full developer profile

Detection Fingerprints

How We Detect Essential Addons for Elementor – Popular Elementor Templates & Widgets

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Essential Addons for Elementor – Popular Elementor Templates & Widgets Security & Risk Analysis

Is Essential Addons for Elementor – Popular Elementor Templates & Widgets Safe to Use in 2026?

Mostly Safe

Key Concerns

Essential Addons for Elementor – Popular Elementor Templates & Widgets Security Vulnerabilities

CVEs by Year

Severity Breakdown

Essential Addons for Elementor – Popular Elementor Templates & Widgets Release Timeline

Essential Addons for Elementor – Popular Elementor Templates & Widgets Code Analysis

Dangerous Functions Found

Bundled Libraries

SQL Query Safety

Output Escaping

Data Flow Analysis

Essential Addons for Elementor – Popular Elementor Templates & Widgets Attack Surface

AJAX Handlers 37

Essential Addons for Elementor – Popular Elementor Templates & Widgets Maintenance & Trust

Maintenance Signals

Community Trust

Essential Addons for Elementor – Popular Elementor Templates & Widgets Alternatives

RTMKit

Turbo Addons Elementor

Essential Classy Addons – Widgets & Templates for Elementor

Selleradise Elements – Elementor Addons

Premium Addons for Elementor – Powerful Elementor Templates & Widgets

Essential Addons for Elementor – Popular Elementor Templates & Widgets Developer Profile

How We Detect Essential Addons for Elementor – Popular Elementor Templates & Widgets

Asset Fingerprints

HTML / DOM Fingerprints

Frequently Asked Questions about Essential Addons for Elementor – Popular Elementor Templates & Widgets