Potter Kit – Elementor, Beaver Builder, Gutenberg Templates and Elementor Blocks Builder Security & Risk Analysis

wordpress.org/plugins/potter-kit

Import Potter themes demo content, widgets and theme settings with just one click.

70 active installs v1.0.9 PHP + WP 4.7+ Updated Sep 21, 2021
demoimporterone-click-importpotter-kittheme-demos
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Potter Kit – Elementor, Beaver Builder, Gutenberg Templates and Elementor Blocks Builder Safe to Use in 2026?

Generally Safe

Score 85/100

Potter Kit – Elementor, Beaver Builder, Gutenberg Templates and Elementor Blocks Builder has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4yr ago
Risk Assessment

The potter-kit plugin v1.0.9 exhibits a concerning security posture due to a significant number of unprotected AJAX handlers. While the plugin avoids dangerous functions, uses prepared statements for most SQL queries, and properly escapes the majority of its output, the presence of 7 AJAX handlers without authentication checks presents a substantial attack surface. These handlers are potential entry points for unauthorized actions or data manipulation if they can be triggered externally without proper validation. The absence of any recorded vulnerabilities in its history is positive, suggesting a potentially diligent development process in the past or a lack of targeted attacks. However, this history alone does not mitigate the immediate risks identified in the static analysis. The plugin's strengths lie in its careful handling of SQL and output, but the lack of authorization on its primary entry points is a critical weakness that needs to be addressed.

Key Concerns

  • AJAX handlers without authentication checks
  • Unprotected entry points (AJAX)
Vulnerabilities
None known

Potter Kit – Elementor, Beaver Builder, Gutenberg Templates and Elementor Blocks Builder Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Potter Kit – Elementor, Beaver Builder, Gutenberg Templates and Elementor Blocks Builder Release Timeline

v1.0.9Current
v1.0.7
v1.0.6
v1.0.5
v1.0.4
Code Analysis
Analyzed Mar 16, 2026

Potter Kit – Elementor, Beaver Builder, Gutenberg Templates and Elementor Blocks Builder Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
5 prepared
Unescaped Output
11
70 escaped
Nonce Checks
7
Capability Checks
11
File Operations
13
External Requests
4
Bundled Libraries
0

SQL Query Safety

83% prepared6 total queries

Output Escaping

86% escaped81 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
demo_download_and_unzip (admin\class-potter-kit-admin.php:523)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
7 unprotected

Potter Kit – Elementor, Beaver Builder, Gutenberg Templates and Elementor Blocks Builder Attack Surface

Entry Points7
Unprotected7

AJAX Handlers 7

authwp_ajax_potter_kit_ajax_setupincludes\class-potter-kit.php:238
authwp_ajax_demo_download_and_unzipincludes\class-potter-kit.php:239
authwp_ajax_plugin_screenincludes\class-potter-kit.php:240
authwp_ajax_install_pluginincludes\class-potter-kit.php:241
authwp_ajax_content_screenincludes\class-potter-kit.php:242
authwp_ajax_import_contentincludes\class-potter-kit.php:243
authwp_ajax_complete_screenincludes\class-potter-kit.php:244
WordPress Hooks 9
actionplugins_loadedincludes\class-potter-kit.php:212
actionadmin_enqueue_scriptsincludes\class-potter-kit.php:227
actionadmin_enqueue_scriptsincludes\class-potter-kit.php:228
actionmime_typesincludes\class-potter-kit.php:231
actionadmin_menuincludes\class-potter-kit.php:234
actioncurrent_screenincludes\class-potter-kit.php:235
actionwp_loadedincludes\class-potter-kit.php:247
actionadmin_initincludes\class-potter-kit.php:248
filterpotter_kit_demo_listsincludes\class-theme-template-library-base.php:28
Maintenance & Trust

Potter Kit – Elementor, Beaver Builder, Gutenberg Templates and Elementor Blocks Builder Maintenance & Trust

Maintenance Signals

WordPress version tested5.4.19
Last updatedSep 21, 2021
PHP min version
Downloads15K

Community Trust

Rating100/100
Number of ratings1
Active installs70
Developer Profile

Potter Kit – Elementor, Beaver Builder, Gutenberg Templates and Elementor Blocks Builder Developer Profile

Potter

1 plugin · 70 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Potter Kit – Elementor, Beaver Builder, Gutenberg Templates and Elementor Blocks Builder

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/potter-kit/admin/js/potter-kit-admin.js/wp-content/plugins/potter-kit/admin/css/potter-kit-admin.css
Script Paths
/wp-content/plugins/potter-kit/admin/js/potter-kit-admin.js
Version Parameters
potter-kit/admin/js/potter-kit-admin.js?ver=potter-kit/admin/css/potter-kit-admin.css?ver=

HTML / DOM Fingerprints

CSS Classes
ai-demo-importai-item-importis-buttonis-defaultis-primaryis-large
Data Attributes
data-plugins
FAQ

Frequently Asked Questions about Potter Kit – Elementor, Beaver Builder, Gutenberg Templates and Elementor Blocks Builder