The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Security & Risk Analysis

wordpress.org/plugins/the-plus-addons-for-elementor-page-builder

Best Addons for Elementor with 120+ Elementor FREE & Pro Widgets & 1000+ Elementor Templates with Mega Menu, Post Grid, Header Footer, WooCommerce

100K active installs v6.4.10 PHP 7.0+ WP 6.0+ Updated Mar 3, 2026

elementorelementor-addonselementor-templateselementor-widgetswidgets-for-elementor

A · Safe

CVEs total33

Unpatched0

Last CVEFeb 21, 2026

Plugin page Download

Safety Verdict

Is The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Safe to Use in 2026?

Generally Safe

Score 92/100

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce has a strong security track record. Known vulnerabilities have been patched promptly.

33 known CVEsLast CVE: Feb 21, 2026Updated 1mo ago

Risk Assessment

The plugin "the-plus-addons-for-elementor-page-builder" v6.4.10 presents a mixed security posture. While the code analysis indicates a generally good adherence to security practices, with a high percentage of properly escaped outputs and a majority of SQL queries using prepared statements, there are significant concerns. The presence of 3 AJAX handlers without authentication checks creates a direct attack vector that could be exploited for unauthorized actions. The taint analysis, though showing no critical or high severity flows, did reveal 7 flows with unsanitized paths, which warrants further investigation and could indicate potential vulnerabilities if not properly handled. The plugin's historical vulnerability record is concerning, with a large number of past CVEs, predominantly in the medium severity category, but also including one high severity issue. The types of past vulnerabilities suggest a history of weaknesses in data verification, authorization, and input sanitization, which could resurface in newer versions. The last reported vulnerability in 2026 is also a point of concern, assuming this is a typo and should be a past date, as it implies ongoing issues.

Key Concerns

AJAX handlers without authentication checks
Taint flows with unsanitized paths
Vulnerability history (33 CVEs, 1 high)
Use of unserialize function

Vulnerabilities

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Security Vulnerabilities

CVEs by Year

3 CVEs in 2021

2021

22 CVEs in 2024

2024

6 CVEs in 2025

2025

2 CVEs in 2026

2026

Patched Has unpatched

Severity Breakdown

High

Medium

33 total CVEs

CVE-2026-2385medium · 5.3Insufficient Verification of Data Authenticity

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay

Feb 21, 2026 Patched in 6.4.8 (1d)

CVE-2026-2386medium · 4.3Incorrect Authorization

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Author+) Arbitrary Draft Post Creation via 'post_type'

Feb 18, 2026 Patched in 6.4.8 (1d)

CVE-2025-9698medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor <= 6.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG

Sep 22, 2025 Patched in 6.3.16 (25d)

CVE-2025-55712medium · 4.3Missing Authorization

The Plus Addons for Elementor Page Builder Lite <= 6.3.13 - Missing Authorization

Aug 14, 2025 Patched in 6.3.14 (5d)

CVE-2025-7646medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jul 31, 2025 Patched in 6.3.11 (1d)

CVE-2025-49076medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor Page Builder Lite <= 6.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

May 30, 2025 Patched in 6.2.8 (4d)

CVE-2025-1287medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

Mar 7, 2025 Patched in 6.2.3 (1d)

CVE-2024-11829medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jan 31, 2025 Patched in 6.2.0 (1d)

CVE-2024-53823medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor Page Builder Lite <= 5.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

Dec 2, 2024 Patched in 6.0.1 (11d)

CVE-2024-10365medium · 4.3Exposure of Sensitive Information to an Unauthorized Actor

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

Nov 19, 2024 Patched in 6.0.4 (1d)

CVE-2024-8913medium · 4.3Exposure of Sensitive Information to an Unauthorized Actor

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template

Oct 10, 2024 Patched in 5.6.12 (1d)

CVE-2024-43977medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Authenticated (Author+) Stored Cross-Site Scripting

Aug 28, 2024 Patched in 5.6.3 (8d)

CVE-2024-43932medium · 4.3Missing Authorization

The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Missing Authorization

Aug 26, 2024 Patched in 5.6.3 (10d)

CVE-2024-5583medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings

Aug 21, 2024 Patched in 5.6.3 (1d)

CVE-2024-5763medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget

Aug 19, 2024 Patched in 5.6.3 (1d)

CVE-2024-6575medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget

Aug 19, 2024 Patched in 5.6.3 (1d)

CVE-2024-4482medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

Jul 2, 2024 Patched in 5.6.2 (1d)

CVE-2024-4983medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting

Jun 26, 2024 Patched in 5.6.1 (1d)

CVE-2024-3718medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box

May 23, 2024 Patched in 5.5.5 (22d)

CVE-2024-4485medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

May 23, 2024 Patched in 5.5.3 (1d)

CVE-2024-2784medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card

May 23, 2024 Patched in 5.5.5 (1d)

CVE-2024-4484medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

May 23, 2024 Patched in 5.5.3 (1d)

CVE-2024-0445medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

May 6, 2024 Patched in 5.5.0 (85d)

CVE-2024-2785medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate

May 6, 2024 Patched in 5.5.0 (4d)

CVE-2024-3199medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

Apr 25, 2024 Patched in 5.5.0 (8d)

CVE-2024-3197medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes

Apr 25, 2024 Patched in 5.5.0 (8d)

CVE-2024-2210medium · 6.4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing

Mar 26, 2024 Patched in 5.4.2 (1d)

CVE-2024-2203medium · 6.4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget

Mar 26, 2024 Patched in 5.4.2 (1d)

CVE-2024-1419medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Header Meta Content Widget

Mar 6, 2024 Patched in 5.4.1 (1d)

CVE-2024-23511medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor <= 5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jan 30, 2024 Patched in 5.3.4 (3d)

CVE-2021-4331high · 8.8Missing Authorization

The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalation

Apr 14, 2021 Patched in 2.0.7 (1014d)

CVE-2021-4332medium · 6.5External Control of File Name or Path

The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read

Apr 14, 2021 Patched in 2.0.7 (1014d)

CVE-2021-24266medium · 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Plus Addons for Elementor Page Builder Lite < 2.0.6 - Authenticated Stored Cross-Site Scripting

Apr 13, 2021 Patched in 2.0.6 (1015d)

Code Analysis

Analyzed Mar 16, 2026

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Code Analysis

Dangerous Functions

Raw SQL Queries

2 prepared

Unescaped Output

240

3085 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Dangerous Functions Found

unserialize$plugin_info = unserialize( wp_remote_retrieve_body( $response ) );includes\admin\dashboard\class-tpae-dashboard-ajax.php:676

unserialize$theme_info = unserialize( $response['body'] );includes\admin\dashboard\class-tpae-dashboard-ajax.php:773

unserialize$plugin_info = unserialize( wp_remote_retrieve_body( $response ) );includes\admin\tpae_hooks\class-tpae-hooks.php:643

unserialize$plugin_info = unserialize( wp_remote_retrieve_body( $response ) );includes\notices\class-tp-wdkit-preview-popup.php:187

unserialize$plugin_info = unserialize( wp_remote_retrieve_body( $response ) );includes\preset\class-wdkit-preset.php:153

unserialize$plugin_info = unserialize(wp_remote_retrieve_body($response));widgets_loader.php:208

Bundled Libraries

DataTables

SQL Query Safety

67% prepared3 total queries

Output Escaping

93% escaped3325 total outputs

Data Flows

7 unsanitized

Data Flow Analysis

13 flows7 with unsanitized paths

tpae_api_call (includes\admin\dashboard\class-tpae-dashboard-ajax.php:810)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

3 unprotected

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Attack Surface

Entry Points38

Unprotected3

AJAX Handlers 38

authwp_ajax_tpae_dashboard_ajax_callincludes\admin\dashboard\class-tpae-dashboard-ajax.php:66

authwp_ajax_theplus_actlicense_notice_dismissincludes\notices\class-tp-activate-license-notice.php:68

authwp_ajax_theplus_askreview_notice_dismissincludes\notices\class-tp-ask-review-notice.php:64

authwp_ajax_theplus_askreview_notice_dismissincludes\notices\class-tp-data-tracking-notice.php:65

authwp_ajax_theplus_explicense_notice_dismissincludes\notices\class-tp-expired-license-notice.php:74

authwp_ajax_theplus_joincom_notice_dismissincludes\notices\class-tp-join-community-notice.php:64

authwp_ajax_theplus_nexter_extension_dismiss_promoincludes\notices\class-tp-nexter-extension-promo.php:79

authwp_ajax_tpae_nxt_ext_pnotice_dismissincludes\notices\class-tp-nexter-extension-promo.php:85

authwp_ajax_theplus_blocks_dismiss_promoincludes\notices\class-tp-nexter-notice.php:95

authwp_ajax_tpae_pluginfeatures_notice_dismissincludes\notices\class-tp-plugin-features-banner.php:71

authwp_ajax_theplus_pro_dismiss_promoincludes\notices\class-tp-tpaepro-notice.php:64

authwp_ajax_tp_install_wdkitincludes\notices\class-tp-wdkit-preview-popup.php:101

authwp_ajax_tp_dont_show_againincludes\notices\class-tp-wdkit-preview-popup.php:103

noprivwp_ajax_tp_dont_show_againincludes\notices\class-tp-wdkit-preview-popup.php:104

authwp_ajax_check_plugin_statusincludes\preset\class-wdkit-preset.php:76

authwp_ajax_tpae_install_wdkitincludes\preset\class-wdkit-preset.php:77

authwp_ajax_tpaep_preset_ajax_callincludes\smart-loop-builder\class-tpae-loop-builder.php:58

authwp_ajax_tp_deactivate_rateus_noticeincludes\user-experience\class-tp-deactivate-feedback.php:88

authwp_ajax_tpae_update_popup_dismissincludes\user-experience\update-popup\class-tp-update-popup.php:78

authwp_ajax_tp_install_promotions_pluginmodules\controls\theme-builder\tpae-class-nxt-download.php:65

authwp_ajax_tpae_create_pagemodules\controls\theme-builder\tpae-class-nxt-download.php:66

authwp_ajax_plus_purge_current_clearmodules\enqueue\plus-generator.php:1179

authwp_ajax_smart_perf_clear_cachemodules\enqueue\plus-generator.php:1191

authwp_ajax_backend_clear_cachemodules\enqueue\plus-generator.php:1192

authwp_ajax_plus_cross_cp_importmodules\extensions\copy-paste\class-tpae-copy-paste.php:76

authwp_ajax_tpae_live_pastemodules\extensions\copy-paste\class-tpae-copy-paste.php:77

authwp_ajax_tp_mark_dynamic_tag_seenmodules\extensions\dynamic-tag\class-tpae-dynamic-tag.php:190

authwp_ajax_tpae_dismiss_dynamic_noticemodules\extensions\dynamic-tag\class-tpae-dynamic-tag.php:197

authwp_ajax_tpae_handle_enable_widgetmodules\widget-promotion\tp-widgets-show\class-tp-widget-show.php:68

authwp_ajax_tpae_form_submissionmodules\widgets-feature\class-tp-form-handler.php:41

noprivwp_ajax_tpae_form_submissionmodules\widgets-feature\class-tp-form-handler.php:42

authwp_ajax_L_theplus_more_postmodules\widgets-feature\class-tp-load-more.php:56

noprivwp_ajax_L_theplus_more_postmodules\widgets-feature\class-tp-load-more.php:57

authwp_ajax_tpae_template_createmodules\widgets-feature\template-editor\class-tp-create-template.php:49

noprivwp_ajax_tpae_template_createmodules\widgets-feature\template-editor\class-tp-create-template.php:50

authwp_ajax_change_current_template_titlemodules\widgets-feature\template-editor\class-tp-create-template.php:52

noprivwp_ajax_change_current_template_titlemodules\widgets-feature\template-editor\class-tp-create-template.php:53

authwp_ajax_tpae_elementor_ajax_callwidgets_loader.php:155

WordPress Hooks 137

actioninitincludes\admin\dashboard\class-tpae-dashboard-listing.php:49

actionadmin_menuincludes\admin\dashboard\class-tpae-dashboard-meta.php:57

actionadmin_enqueue_scriptsincludes\admin\dashboard\class-tpae-dashboard-meta.php:58

filteradmin_body_classincludes\admin\dashboard\class-tpae-dashboard-meta.php:62

actionadmin_footerincludes\admin\dashboard\class-tpae-dashboard-meta.php:247

actionadmin_menuincludes\admin\dashboard\class-tpae-dashboard-meta.php:250

actionadmin_footerincludes\admin\dashboard\class-tpae-dashboard-meta.php:255

filterwdk_widget_ajax_callincludes\admin\dashboard\class-wdk-widget-api.php:56

actionwp_headincludes\admin\extra-option\class-tpae-custom-code.php:59

actionwp_footerincludes\admin\extra-option\class-tpae-custom-code.php:60

actionadd_meta_boxesincludes\admin\extra-option\clients_options.php:51

actionsave_postincludes\admin\extra-option\clients_options.php:52

actionadd_meta_boxesincludes\admin\extra-option\teammember_options.php:51

actionsave_postincludes\admin\extra-option\teammember_options.php:52

actionadd_meta_boxesincludes\admin\extra-option\testimonial_option.php:51

actionsave_postincludes\admin\extra-option\testimonial_option.php:52

actiontpae_db_defaultincludes\admin\tpae_hooks\class-tpae-hooks.php:210

filtertpae_get_post_typeincludes\admin\tpae_hooks\class-tpae-hooks.php:211

filtertpae_enable_widgetsincludes\admin\tpae_hooks\class-tpae-hooks.php:212

filtertpae_remove_backend_filesincludes\admin\tpae_hooks\class-tpae-hooks.php:213

filtertpae_enable_selected_widgetsincludes\admin\tpae_hooks\class-tpae-hooks.php:214

filtertpae_elementor_disable_widgetsincludes\admin\tpae_hooks\class-tpae-hooks.php:215

filtertpae_get_plugin_statusincludes\admin\tpae_hooks\class-tpae-hooks.php:216

filtertpae_plugin_installincludes\admin\tpae_hooks\class-tpae-hooks.php:217

filtertpae_widget_scanincludes\admin\tpae_hooks\class-tpae-widgets-scan.php:82

filterall_pluginsincludes\admin\white_label\class-tpae-white-label.php:49

actionadmin_noticesincludes\notices\class-tp-activate-license-notice.php:66

actionadmin_noticesincludes\notices\class-tp-ask-review-notice.php:81

actionadmin_noticesincludes\notices\class-tp-ask-review-notice.php:84

actionadmin_noticesincludes\notices\class-tp-data-tracking-notice.php:64

actionadmin_noticesincludes\notices\class-tp-expired-license-notice.php:89

actionadmin_noticesincludes\notices\class-tp-expired-license-notice.php:95

actionadmin_noticesincludes\notices\class-tp-expired-license-notice.php:101

actionadmin_noticesincludes\notices\class-tp-join-community-notice.php:75

actionadmin_noticesincludes\notices\class-tp-nexter-extension-promo.php:77

actionadmin_noticesincludes\notices\class-tp-nexter-notice.php:91

actionadmin_noticesincludes\notices\class-tp-plugin-features-banner.php:67

filterplugin_row_metaincludes\notices\class-tp-plugin-page.php:76

actionadmin_noticesincludes\notices\class-tp-tpaepro-notice.php:75

actionelementor/editor/before_enqueue_scriptsincludes\notices\class-tp-wdkit-preview-popup.php:96

actionelementor/editor/before_enqueue_scriptsincludes\notices\class-tp-wdkit-preview-popup.php:97

actionelementor/preview/enqueue_stylesincludes\notices\class-tp-wdkit-preview-popup.php:100

actionelementor/editor/footerincludes\notices\class-tp-wdkit-preview-popup.php:106

actionadmin_noticesincludes\notices\class-tp-widget-notice.php:68

actionadmin_noticesincludes\notices\class-tp-widget-notice.php:69

actionadmin_noticesincludes\notices\class-tp-widget-notice.php:70

filterwoocommerce_add_to_cart_fragmentsincludes\plus_addon.php:37

actionelementor/widgets/registerincludes\plus_addon.php:246

actionelementor/editor/before_enqueue_scriptsincludes\preset\class-wdkit-preset.php:72

actionelementor/editor/before_enqueue_scriptsincludes\preset\class-wdkit-preset.php:73

actionelementor/editor/footerincludes\preset\class-wdkit-preset.php:79

actionelementor/editor/before_enqueue_scriptsincludes\smart-loop-builder\class-tpae-loop-builder.php:56

actioncurrent_screenincludes\user-experience\class-tp-deactivate-feedback.php:121

actionadmin_enqueue_scriptsincludes\user-experience\class-tp-deactivate-feedback.php:129

actionadmin_footerincludes\user-experience\class-tp-deactivate-feedback.php:144

actionadminmenuincludes\user-experience\update-popup\class-tp-update-popup.php:72

actionwp_enqueue_scriptsincludes\user-experience\update-popup\class-tp-update-popup.php:74

actionadmin_enqueue_scriptsincludes\user-experience\update-popup\class-tp-update-popup.php:75

actionelementor/editor/after_enqueue_scriptsmodules\controls\theme-builder\tpae-class-nxt-download.php:64

actionelementor/frontend/before_enqueue_stylesmodules\enqueue\plus-generator.php:1162

actionelementor/theme/register_locationsmodules\enqueue\plus-generator.php:1163

filterelementor/files/file_namemodules\enqueue\plus-generator.php:1164

actionwp_footermodules\enqueue\plus-generator.php:1166

actionelementor/editor/after_savemodules\enqueue\plus-generator.php:1168

actiontrashed_postmodules\enqueue\plus-generator.php:1169

actionwpmodules\enqueue\plus-generator.php:1171

filterelementor/frontend/builder_content_datamodules\enqueue\plus-generator.php:1174

actionadmin_bar_menumodules\enqueue\plus-generator.php:1177

actionwp_headmodules\enqueue\plus-generator.php:1183

actionwp_enqueue_scriptsmodules\enqueue\plus-generator.php:1187

actionadmin_initmodules\enqueue\plus-generator.php:1190

actionelementor/frontend/before_rendermodules\extensions\animation\class-tp-gsap-main.php:77

actionelementor/frontend/after_enqueue_scriptsmodules\extensions\animation\class-tp-gsap-main.php:87

actionelementor/kit/register_tabsmodules\extensions\animation\class-tp-gsap-main.php:95

actionelementor/editor/after_enqueue_scriptsmodules\extensions\animation\class-tp-gsap-main.php:97

actionelementor/element/section/section_advanced/after_section_endmodules\extensions\animation\class-tpae-gsap-animation.php:76

actionelementor/element/column/_section_responsive/after_section_endmodules\extensions\animation\class-tpae-gsap-animation.php:77

actionelementor/element/common/section_custom_css_pro/after_section_endmodules\extensions\animation\class-tpae-gsap-animation.php:78

actionelementor/element/container/section_layout/after_section_endmodules\extensions\animation\class-tpae-gsap-animation.php:81

filterelementor/widget/render_contentmodules\extensions\animation\class-tpae-gsap-animation.php:84

actionelementor/frontend/before_rendermodules\extensions\animation\class-tpae-gsap-animation.php:85

actionelementor/element/section/section_advanced/after_section_endmodules\extensions\class-tpae-advanced-shadow.php:83

actionelementor/element/column/_section_responsive/after_section_endmodules\extensions\class-tpae-advanced-shadow.php:84

actionelementor/element/common/section_custom_css_pro/after_section_endmodules\extensions\class-tpae-advanced-shadow.php:85

actionelementor/element/container/section_layout/after_section_endmodules\extensions\class-tpae-advanced-shadow.php:88

actionelementor/frontend/before_rendermodules\extensions\class-tpae-advanced-shadow.php:91

actionelementor/element/section/section_advanced/after_section_endmodules\extensions\class-tpae-equal-height.php:84

actionelementor/element/column/_section_responsive/after_section_endmodules\extensions\class-tpae-equal-height.php:85

actionelementor/element/common/section_custom_css_pro/after_section_endmodules\extensions\class-tpae-equal-height.php:86

actionelementor/element/container/section_layout/after_section_endmodules\extensions\class-tpae-equal-height.php:89

actionelementor/frontend/before_rendermodules\extensions\class-tpae-equal-height.php:94

actionwp_enqueue_scriptsmodules\extensions\class-tpae-equal-height.php:96

actionelementor/editor/before_enqueue_scriptsmodules\extensions\class-tpae-equal-height.php:98

actionelementor/editor/after_enqueue_scriptsmodules\extensions\class-tpae-equal-height.php:99

actionelementor/element/section/section_advanced/after_section_endmodules\extensions\class-tpae-glass-morphism.php:76

actionelementor/element/column/_section_responsive/after_section_endmodules\extensions\class-tpae-glass-morphism.php:77

actionelementor/element/common/section_custom_css_pro/after_section_endmodules\extensions\class-tpae-glass-morphism.php:78

actionelementor/element/container/section_layout/after_section_endmodules\extensions\class-tpae-glass-morphism.php:81

actionelementor/frontend/before_rendermodules\extensions\class-tpae-glass-morphism.php:84

actionelementor/editor/before_enqueue_scriptsmodules\extensions\copy-paste\class-tpae-copy-paste.php:75

actionelementor/dynamic_tags/registermodules\extensions\dynamic-tag\class-tpae-dynamic-tag.php:139

actionelementor/dynamic_tags/registermodules\extensions\dynamic-tag\class-tpae-dynamic-tag.php:140

actionelementor/editor/after_enqueue_scriptsmodules\extensions\dynamic-tag\class-tpae-dynamic-tag.php:143

actionelementor/editor/after_enqueue_stylesmodules\extensions\dynamic-tag\class-tpae-dynamic-tag.php:144

actionelementor/editor/after_enqueue_scriptsmodules\extensions\dynamic-tag\class-tpae-dynamic-tag.php:153

actionelementor/editor/after_enqueue_stylesmodules\extensions\dynamic-tag\class-tpae-dynamic-tag.php:155

actionelementor/editor/after_enqueue_stylesmodules\extensions\dynamic-tag\class-tpae-dynamic-tag.php:164

actionelementor/editor/after_enqueue_scriptsmodules\extensions\dynamic-tag\class-tpae-dynamic-tag.php:171

actionelementor/element/column/_section_responsive/after_section_endmodules\extensions\wrapper-link\class-tpae-wrapper-link.php:84

actionelementor/element/section/_section_responsive/after_section_endmodules\extensions\wrapper-link\class-tpae-wrapper-link.php:85

actionelementor/element/common/section_custom_css_pro/after_section_endmodules\extensions\wrapper-link\class-tpae-wrapper-link.php:86

actionelementor/element/container/section_layout/after_section_endmodules\extensions\wrapper-link\class-tpae-wrapper-link.php:89

actionelementor/frontend/before_rendermodules\extensions\wrapper-link\class-tpae-wrapper-link.php:92

actionwp_enqueue_scriptsmodules\extensions\wrapper-link\class-tpae-wrapper-link.php:93

actionelementor/editor/before_enqueue_scriptsmodules\extensions\wrapper-link\class-tpae-wrapper-link.php:95

actionelementor/editor/after_enqueue_scriptsmodules\extensions\wrapper-link\class-tpae-wrapper-link.php:96

actionelementor/ajax/register_actionsmodules\query-control\module.php:54

actionelementor/widgets/registermodules\theplus-include-widgets.php:68

actionelementor/controls/controls_registeredmodules\theplus-integration.php:26

actionelementor/editor/after_enqueue_scriptsmodules\widget-promotion\tp-widget-promotion\class-tp-widget-promotion.php:68

actionelementor/widgets/registermodules\widget-promotion\tp-widget-promotion-main.php:67

actionelementor/editor/after_enqueue_scriptsmodules\widget-promotion\tp-widgets-show\class-tp-widget-show.php:66

filterget_the_archive_titlemodules\widgets\tp_post_title.php:694

actionelementor/editor/before_enqueue_scriptsmodules\widgets-feature\template-editor\class-tp-create-template.php:47

actioninitwidgets_loader.php:75

actionplugins_loadedwidgets_loader.php:76

actionadmin_noticeswidgets_loader.php:154

actionadmin_enqueue_scriptswidgets_loader.php:156

actionwp_headwidgets_loader.php:328

actionelementor/elements/categories_registeredwidgets_loader.php:332

actionelementor/editor/after_enqueue_styleswidgets_loader.php:333

actionwp_enqueue_scriptswidgets_loader.php:336

filterupload_mimeswidgets_loader.php:339

filterwp_handle_upload_prefilterwidgets_loader.php:340

actionadmin_enqueue_scriptswidgets_loader.php:343

actionadmin_footerwidgets_loader.php:348

actionelementor/initwidgets_loader.php:368

Maintenance & Trust

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedMar 3, 2026

PHP min version7.0

Downloads5.7M

Community Trust

Rating92/100

Number of ratings384

Active installs100K

Alternatives

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Alternatives

Unlimited Elements For Elementor

unlimited-elements-for-elementor

Elementor all-in-one addons pack with the best widgets for Elementor, offering 100+ free widgets, templates, and tools to create stunning websites!

300K 29 CVEs

Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits

master-addons

55+ Elementor widgets, 20+ extensions, Theme Builder, Popup Builder, Widget Builder & Template Kits — build any site without code.

30K 23 CVEs

King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder

king-addons

Elementor addons: Elementor widgets, Elementor templates, 80+ widgets, 4 000+ templates and sections, Mega Menu, Popup Builder, WooCommerce, AI tools.

10K 3 unpatched

Anant Addons for Elementor – Widgets, Templates & WooCommerce Builder

anant-addons-for-elementor

Extend Elementor with 80+ lightweight widgets, WooCommerce builder elements, header & footer builder, blog layouts, sliders, and ready-made Elemen …

900 1 unpatched

Wow Elements Addons for Elementor

wow-elements-addons-for-elementor

100

The most powerful free addons & widgets for Elementor. 175+ advanced features for responsive sites. Drag-and-drop, pixel-perfect, mobile friendly.

10 No CVEs

Developer Profile

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Developer Profile

POSIMYTH

8 plugins · 460K total installs

trust score

Avg Security Score

96/100

Avg Patch Time

72 days

View full developer profile

Detection Fingerprints

How We Detect The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/the-plus-addons-for-elementor-page-builder/assets/fonts/style.css/wp-content/plugins/the-plus-addons-for-elementor-page-builder/includes/nxt-ext/build/index.css/wp-content/plugins/the-plus-addons-for-elementor-page-builder/includes/nxt-ext/build/index.js/wp-content/plugins/the-plus-addons-for-elementor-page-builder/build/index.js/wp-content/plugins/the-plus-addons-for-elementor-page-builder/build/index.css

Script Paths

/wp-content/plugins/the-plus-addons-for-elementor-page-builder/includes/nxt-ext/build/index.js/wp-content/plugins/the-plus-addons-for-elementor-page-builder/build/index.js

Version Parameters

the-plus-addons-for-elementor-page-builder/assets/fonts/style.css?ver=the-plus-addons-for-elementor-page-builder/includes/nxt-ext/build/index.css?ver=the-plus-addons-for-elementor-page-builder/includes/nxt-ext/build/index.js?ver=the-plus-addons-for-elementor-page-builder/build/index.js?ver=the-plus-addons-for-elementor-page-builder/build/index.css?ver=

HTML / DOM Fingerprints

CSS Classes

nxt-page-nexter-builder

Data Attributes

data-plugin="theplus-addons-for-elementor-page-builder"data-version="6.4.10"

JS Globals

nexter_theme_builder_configtpae_db_object

FAQ

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Security & Risk Analysis

Is The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Safe to Use in 2026?

Generally Safe

Key Concerns

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Security Vulnerabilities

CVEs by Year

Severity Breakdown

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Code Analysis

Dangerous Functions Found

Bundled Libraries

SQL Query Safety

Output Escaping

Data Flow Analysis

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Attack Surface

AJAX Handlers 38

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Maintenance & Trust

Maintenance Signals

Community Trust

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Alternatives

Unlimited Elements For Elementor

Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits

King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder

Anant Addons for Elementor – Widgets, Templates & WooCommerce Builder

Wow Elements Addons for Elementor

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Developer Profile

How We Detect The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce

Asset Fingerprints

HTML / DOM Fingerprints

Frequently Asked Questions about The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce