Plugin Pulse Beta
← Pulse

Elementor Website Builder – more than just a page builder

by Elementor · AI

Also makes 13 other plugins · 12.3M+ installs across the portfolio →

Try it live ↗ wp.org ↗

The Elementor Website Builder has it all: drag and drop page builder, Atomic Editor, pixel perfect design, global and reusable style systems, mobile r …

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

Health

A 88/100

no flags

Active installs

10M+

≈16M estimated

Momentum

+2%

downloads vs prior 30d

Biggest opportunity: Swap “ai” for “ai summary”. “ai” isn't earning its slot: it only gets you to #11. “ai summary” sits at #4 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.

See the detail → Get the free audit
How scoring works →
88 Health · A
Maintenance 100/100
Rating quality 89/100
Support 78/100
Security 75/100

88 health vs 77 average across 3,393 AI plugins

10M+

Active installs

≈16M estimated

911.9M

Total downloads

since 2016 · 1.1% still active

4.5/5

Rating

7,322 reviews · +2.4/wk

+2%

10.5M

Downloads · 30d

category median +18%

Install conversion

How it's measured →

1.1%

of downloads still active

At least 10M of 911.9M lifetime downloads are still running, in line with its category: the median AI plugin keeps 1.4%, across 1,011 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other AI plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 84 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Ratings · 7322 reviews

Read on wp.org ↗
5★
6157 4★
233 3★
121 2★
121 1★
690

Details

Version
4.3.5
Last updated
19d ago
Added
2016-05-30 · 10 yrs old
Requires WP
6.8
Tested up to
7.1.4
Requires PHP
7.4
Changelog ↗Support forum ↗Reviews ↗Advanced stats ↗

Recent review vibe

read from the latest 12 reviews to 2026-07-19
Negative Broken updatesSupport gone quietPerformanceCompatibilityOnboarding

Reviewers describe broken updates, unresolved support tickets, and heavy performance and compatibility problems, with only a couple of positive voices mixed in.

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

94 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100

Updated 19 days ago

WP compatibility 100/100

Tested up to WordPress 7.1.4, the current branch or newer

Rating quality 90/100

4.5★ over 7,322 reviews, smoothed to 4.50★

Listing tuning 100/100

5 of 5 tags set · short description in place

Support resolution 70/100

49 of 70 support threads resolved in the last 2 months

Daily downloads

Since 5 Oct 2022 · 1,489 days · wp.org + Plugin Pulse archive

+2% vs prior 30d
78.3K1 Nov 2026

30-day downloads

Rolling 30-day volume · peak 34.6M · peaks are release surges

10.4M1 Nov 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Elementor Website Bu · #1youPage Builder: Pagela · #145Colibri Page Builder · #505TemplateSpare · #1879

Rating trend

Star average over time · dips mark rough releases

4.51 Nov 2026

Health trend

Composite health score, snapshotted daily

881 Nov 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

1K1 Nov 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

84

releases in the last 12 months

19d ago

latest release · v4.3.5 · 13 Oct 2026

457

tagged releases on record

Recent releases

4.3.5 · 13 Oct 20264.3.4 · 5 Oct 20264.3.3 · 30 Sep 20264.3.2 · 24 Sep 20264.3.1 · 23 Sep 20264.3.0 · 22 Sep 20264.3.0-beta3 · 17 Sep 20264.3.0-beta2 · 8 Sep 20264.3.0-beta1 · 1 Sep 20264.2.4 · 31 Aug 20264.2.3 · 27 Aug 20264.2.2 · 6 Aug 20264.2.1 · 28 Jul 20264.2.0 · 20 Jul 2026

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v4.1 48%
v4.0 7.4%
v3.35 5.2%
Older / other versions 39%

Estimated active installs

The public count shows “10M+”. Our estimate pins where the real number sits.

tracked estimate
10M–20M ≈16M

Crossed into this band 2.4 years ago; the previous band took 3.9 years to cross, which places it about 63% of the way through.

Install history since 1 Dec 2021

10M1 Nov 2026

Recent reviews

All reviews on wp.org ↗
  1. ★★★★★ jonyshanto
    4mo ago

    The plugin is updated regularly, but the lagging issues and functionality problems are never fixed. This topic was modified 1 day, 1 hour ago by jonyshanto.

    Read on wp.org ↗
  2. ★★★★★ Anonymous
    4mo ago

    Really difficult and time consuming to work with, and mixing old and new Atomic layouts is quite the mess to work with, but the end-result usually looks worth.

    Read on wp.org ↗
  3. ★★★★★ hussainmirza11
    4mo ago

    While Elementor is easy to use, it adds a significant amount of CSS and JavaScript. On larger websites, this can negatively impact loading speed and overall performance. There are also occasional compatibility issues after updates, which can be frustrating.

    Read on wp.org ↗
  4. ★★★★★ Maria del Castillo
    4mo ago

    Still waiting for support to fix the atomic designer. After a recent update my website broke completely (error with containers) and after more than a month I’m still waiting for support to fix it. They admited it is a problem on their side, but still haven’t done anything to solve it. Would not recommend this plugin anymore.

    Read on wp.org ↗
  5. ★★★★★ Thierry Laval
    4mo ago

    Elementor is an excellent page builder, but my frustration, as well as that of my clients regarding the repeated display of promotional messages in the dashboard, leads me to give it only one star. It is becoming extremely annoying to see advertising everywhere, including inside an administration area that should remain a clean and professional workspace. This constant promotion creates a strong rejection of the product instead of encouraging users to continue using Elementor. Users should be given a simple option to disable these promotional messages and keep control over their own workspace.

    Read on wp.org ↗
  6. ★★★★★ ashlyjohny
    4mo ago

    The plugin is good and offers useful features, but the learning curve is quite steep for new users. Better documentation or beginner-friendly tutorials would make it much easier to get started. This topic was modified 1 week, 5 days ago by ashlyjohny.

    Read on wp.org ↗
  7. ★★★★★ ethanmaller
    4mo ago

    Elementor was key in helping us implement our designs across our pages and blogs. It was an interesting learning curve at first, but everything clicked once we understood the logic.

    Read on wp.org ↗
  8. ★★★★★ updesignme
    4mo ago

    I am very disappointed with Elementor. V4 is utterly unreliable and causing all kinds of erratic behaviour and difficulties. There is limited help resources available, and just don’t try to contact support, because everything will your fault. I have already moved my hosting away. Seems it’s time to look for a new page builder too. Not happy Elementor!

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. 2026-10-13 Version 4.3.5 Fix: Page editing can fail when Internal CSS Embedding is enabled ( #37468 ) Fix: Improved code security enforcement across CSS, SVG, and element ID handling Fix: Theme Builder fails to open correctly from “Edit with Ele 4.3.5
  2. 2026-10-05 Version 4.3.4 Tweak: Improved MCP connector setup instructions across macOS, Windows, and Linux Fix: Dropdown menus do not open on the frontend due to missing feature dependencies (props @faisalahammad )> Fix: Widget styles can be mis 4.3.4
  3. 2026-09-30 Version 4.3.3 Tweak: Improved access control when MCP is disabled Fix: MCP build errors do not clearly identify invalid or unclosed elements Fix: Certain MCP style values are not applied correctly in Atomic elements 4.3.3
  4. 2026-09-24 Version 4.3.2 Tweak: Improved the Editor onboarding flow for a smoother getting-started experience. Fix: HTML Tags do not work correctly with Background Video ( #37393 ) Fix: Improved compatibility with sites protected by HTTP Basic A 4.3.2
  5. 2026-09-23 Version 4.3.1 Fix: Top bar translations are not displayed correctly on Elementor admin pages 4.3.1
  6. 2026-09-22 Version 4.3.0 New: Introducing Elementor MCP – enabling compatible AI tools to build pages, edit elements, and work with your design system New: Introducing a dedicated Elementor MCP page for connecting external AI tools to your site 4.3.0

Security history

via Wordfence Intelligence

All 57 disclosed vulnerabilities are patched in the current version (4.3.5). Sites still on an older version should update.

  1. Patched Medium · 6.4 Elementor <= 4.3.4 - Authenticated (Author+) Stored Cross-Site Scripting ↗
    2026-10-19 CVE-2026-81812 Improper Neutralization of Input During Web Page Generation Affects <= 4.3.4 Patched in 4.3.5
  2. Patched Medium · 6.4 Elementor <= 4.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-10-19 CVE-2026-81813 Improper Neutralization of Input During Web Page Generation Affects <= 4.3.4 Patched in 4.3.5
  3. Patched Medium · 4.3 Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameters ↗
    2026-10-14 CVE-2026-11905 Missing Authorization Affects <= 4.2.3 Patched in 4.2.4
  4. Patched High · 8.8 Elementor Website Builder 4.3.0 - 4.3.1 - Cross-Site Request Forgery via REST Nonce Bypass to Privilege Escalation ↗
    2026-09-25 CVE-2026-62062 Cross-Site Request Forgery Affects 4.3.0 - 4.3.1 Patched in 4.3.2
  5. Patched Medium · 4.3 Elementor <= 4.1.3 - Authenticated (Contributor+) Sensitive Information Exposure ↗
    2026-06-29 CVE-2026-8825 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.1.3 Patched in 4.1.4
  6. Patched Medium · 4.3 Elementor Website Builder – more than just a page builder <= 4.1.3 - Authenticated (Contributor+) Sensitive Information Exposure ↗
    2026-06-25 CVE-2026-57619 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.1.3 Patched in 4.1.4
  7. Patched Medium · 4.3 Elementor Website Builder – more than just a page builder <= 4.1.0 - Missing Authorization ↗
    2026-06-02 CVE-2026-49782 Missing Authorization Affects <= 4.1.0 Patched in 4.1.1
  8. Patched Medium · 6.4 Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API ↗
    2026-04-30 CVE-2026-6127 Improper Neutralization of Input During Web Page Generation Affects <= 4.0.4 Patched in 4.0.5
  9. Patched Medium · 6.4 Elementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API ↗
    2026-04-07 CVE-2025-14732 Improper Neutralization of Alternate XSS Syntax Affects <= 3.35.5 Patched in 3.35.6
  10. Patched Medium · 4.3 Elementor Website Builder <= 3.35.7 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template ↗
    2026-03-25 CVE-2026-1206 Authorization Bypass Through User-Controlled Key Affects <= 3.35.7 Patched in 3.35.8
  11. Patched Medium · 4.3 Elementor Website Builder <= 3.35.5 - Missing Authorization ↗
    2026-03-07 CVE-2026-32445 Missing Authorization Affects <= 3.35.5 Patched in 3.35.6
  12. Patched Medium · 6.4 Elementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-02-13 CVE-2026-32352 Improper Neutralization of Input During Web Page Generation Affects <= 3.35.5 Patched in 3.35.6
  13. Patched Medium · 6.4 Elementor <= 3.33.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Text Path ↗
    2025-12-15 CVE-2025-11220 Improper Neutralization of Input During Web Page Generation Affects <= 3.33.3 Patched in 3.33.4
  14. Patched Medium · 4.3 Elementor Website Builder <= 3.33.0 - Missing Authorization ↗
    2025-11-25 CVE-2025-67588 Missing Authorization Affects <= 3.33.0 Patched in 3.33.1
  15. Patched Medium · 4.9 Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import ↗
    2025-08-11 CVE-2025-8081 Improper Limitation of a Pathname to a Restricted Directory Affects <= 3.30.2 Patched in 3.30.3
  16. Patched Medium · 6.4 Elementor <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-07-28 CVE-2025-3075 Improper Neutralization of Input During Web Page Generation Affects <= 3.29.0 Patched in 3.29.1
  17. Patched Medium · 6.4 Elementor <= 3.30.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Path Widget ↗
    2025-07-28 CVE-2025-4566 Improper Neutralization of Input During Web Page Generation Affects <= 3.30.2 Patched in 3.30.3
  18. Patched Medium · 6.4 Elementor Website Builder <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-06-19 CVE-2024-50555 Improper Neutralization of Input During Web Page Generation Affects <= 3.29.0 Patched in 3.29.1
  19. Patched Medium · 6.4 Elementor Website Builder <= 3.25.10 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-02-24 CVE-2024-54444 Improper Neutralization of Input During Web Page Generation Affects <= 3.25.10 Patched in 3.25.11
  20. Patched Medium · 6.4 Elementor Website Builder – More Than Just a Page Builder <= 3.27.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-02-19 CVE-2024-13445 Improper Neutralization of Input During Web Page Generation Affects <= 3.27.4 Patched in 3.27.5
  21. Patched Medium · 6.4 Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings ↗
    2024-12-20 CVE-2024-10453 Improper Neutralization of Input During Web Page Generation Affects <= 3.25.9 Patched in 3.25.10
  22. Patched Medium · 6.4 Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-11-25 CVE-2024-8236 Improper Neutralization of Input During Web Page Generation Affects <= 3.25.7 Patched in 3.25.8
  23. Patched Medium · 4.3 Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function ↗
    2024-10-14 CVE-2024-6757 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.24.5 Patched in 3.24.6
  24. Patched Medium · 5.4 Elementor Website Builder – More than Just a Page Builder <= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets ↗
    2024-09-10 CVE-2024-5416 Improper Neutralization of Input During Web Page Generation Affects <= 3.23.4 Patched in 3.24.0
  25. Patched Medium · 6.4 Elementor Website Builder <= 3.22.1 - Authenticated (Contributor+) Arbitrary SVG Download ↗
    2024-06-28 CVE-2024-37437 Improper Neutralization of Input During Web Page Generation Affects <= 3.22.1 Patched in 3.22.2
  26. Patched Medium · 6.4 Elementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting ↗
    2024-05-20 CVE-2024-4619 Improper Neutralization of Input During Web Page Generation Affects <= 3.21.5 Patched in 3.21.6
  27. Patched Medium · 6.4 Elementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path Widget ↗
    2024-03-26 CVE-2024-2117 Improper Neutralization of Input During Web Page Generation Affects <= 3.20.2 Patched in 3.20.3
  28. Patched Medium · 6.4 Elementor Website Builder – More than Just a Page Builder <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_alt ↗
    2024-02-07 CVE-2024-0506 Improper Neutralization of Input During Web Page Generation Affects <= 3.18.3 Patched in 3.19.0
  29. Patched High · 8.8 Elementor <= 3.19.0 - Authenticated(Contributor+) Arbitrary File Deletion and PHAR Deserialization ↗
    2024-02-07 CVE-2024-24934 Improper Limitation of a Pathname to a Restricted Directory Affects <= 3.19.0 Patched in 3.19.1
  30. Patched High · 8.8 Elementor <= 3.18.1 - Authenticated(Contributor+) Arbitrary File Upload to Remote Code Execution via Template Import ↗
    2023-12-06 CVE-2023-48777 Unrestricted Upload of File with Dangerous Type Affects <= 3.18.1 Patched in 3.18.2
  31. Patched Medium · 6.4 Elementor Website Builder <= 3.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_inline_svg() ↗
    2023-11-08 CVE-2023-47505 Improper Neutralization of Input During Web Page Generation Affects <= 3.16.4 Patched in 3.16.5
  32. Patched Medium · 6.5 Elementor Website Builder <= 3.16.4 - Missing Authorization to Arbitrary Attachment Read ↗
    2023-11-08 CVE-2023-47504 Missing Authorization Affects <= 3.16.4 Patched in 3.16.5
  33. Patched Medium · 6.1 Elementor <= 3.5.4 - DOM-Based iFrame Injection ↗
    2023-07-19 CVE-2022-4953 Improper Neutralization of Input During Web Page Generation Affects <= 3.5.4 Patched in 3.5.5
  34. Patched Medium · 5.4 Elementor <= 3.13.2 Authenticated(Contributor+) Arbitrary Post Type Creation via save_item ↗
    2023-05-22 CVE-2023-33922 Creation of Emergent Resource Affects < 3.13.3 Patched in 3.13.3
  35. Patched Medium · 5.4 Elementor <= 3.13.1 - Missing Authorization to Settings Update ↗
    2023-05-12 Missing Authorization Affects <= 3.13.1 Patched in 3.13.2
  36. Patched Medium · 6.6 Elementor <= 3.12.1 - Authenticated(Administrator+) SQL Injection via 'replace_urls' ↗
    2023-04-24 CVE-2023-0329 Improper Neutralization of Special Elements used in an SQL Command Affects < 3.12.2 Patched in 3.12.2
  37. Patched Medium · 6.1 Elementor Website Builder <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting ↗
    2022-06-13 CVE-2022-29455 Improper Neutralization of Input During Web Page Generation Affects <= 3.5.5 Patched in 3.5.6
  38. Patched High · 8.8 Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution ↗
    2022-04-13 CVE-2022-1329 Missing Authorization Affects 3.6.0 - 3.6.2 Patched in 3.6.3
  39. Patched Medium · 6.1 Elementor Website Builder <= 3.4.7 - DOM-based Cross-Site Scripting ↗
    2021-03-23 CVE-2021-24891 Improper Neutralization of Input During Web Page Generation Affects 0.1.0 - 3.4.7 Patched in 3.4.8
  40. Patched Medium · 6.4 Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_html_tag ↗
    2021-03-17 CVE-2021-24204 Improper Neutralization of Input During Web Page Generation Affects <= 3.1.3 Patched in 3.1.4
  41. Patched Medium · 6.4 Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_size ↗
    2021-03-17 CVE-2021-24206 Improper Neutralization of Input During Web Page Generation Affects 0.1.0 - 3.1.3 Patched in 3.1.4
  42. Patched Medium · 6.4 Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via html_tag ↗
    2021-03-17 CVE-2021-24201 Improper Neutralization of Input During Web Page Generation Affects 0.1.0 - 3.1.3 Patched in 3.1.4
  43. Patched Medium · 6.4 Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_size Parameter ↗
    2021-03-17 CVE-2021-24205 Improper Neutralization of Input During Web Page Generation Affects < 3.1.4 Patched in 3.1.4
  44. Patched Medium · 6.4 Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_size ↗
    2021-03-17 CVE-2021-24202 Improper Neutralization of Input During Web Page Generation Affects 0.1.0 - 3.1.3 Patched in 3.1.4
  45. Patched Medium · 6.4 Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via html_tag ↗
    2021-03-17 CVE-2021-24203 Improper Neutralization of Input During Web Page Generation Affects 0.1.0 - 3.1.3 Patched in 3.1.4
  46. Patched Medium · 6.4 Elementor Website Builder <= 3.0.13 - Unrestricted SVG Uploads ↗
    2020-11-25 CVE-2020-36171 Improper Neutralization of Input During Web Page Generation Affects <= 3.0.13 Patched in 3.0.14
  47. Patched Medium · 6.4 Elementor Website Builder <= 2.9.13 - Authenticated Stored Cross-Site Scripting ↗
    2020-07-07 CVE-2020-15020 Improper Neutralization of Input During Web Page Generation Affects < 2.9.14 Patched in 2.9.14
  48. Patched Medium · 5.4 Elementor Website Builder <= 2.9.8 - Stored Cross-Site Scripting ↗
    2020-06-05 CVE-2020-13864 Improper Neutralization of Input During Web Page Generation Affects <= 2.9.8 Patched in 2.9.9
  49. Patched Medium · 5.4 Elementor Website Builder <= 2.9.8 - Stored Cross-Site Scripting ↗
    2020-06-05 CVE-2020-13865 Improper Neutralization of Input During Web Page Generation Affects <= 2.9.8 Patched in 2.9.9
  50. Patched Medium · 6.4 Elementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scripting ↗
    2020-04-21 CVE-2020-36703 Improper Neutralization of Input During Web Page Generation Affects <= 2.9.7 Patched in 2.9.8
  51. Patched Medium · 6.5 Elementor Website Builder <= 2.9.5 - Authorization Bypass ↗
    2020-03-31 CVE-2020-20634 Missing Authorization Affects <= 2.9.5 Patched in 2.9.6
  52. Patched Medium · 6.4 Elementor Website Builder <= 2.9.2 - Stored Cross-Site Scripting ↗
    2020-02-26 CVE-2020-20406 Improper Neutralization of Input During Web Page Generation Affects <= 2.9.2 Patched in 2.9.3
  53. Patched Medium · 6.4 Elementor Website Builder <= 2.7.5 - Stored Cross-Site Scripting ↗
    2020-01-29 Improper Neutralization of Input During Web Page Generation Affects <= 2.7.5 Patched in 2.7.6
  54. Patched Medium · 6.1 Elementor Website Builder <= 2.8.4 - Reflected Cross-Site Scripting ↗
    2020-01-29 CVE-2020-8426 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.4 Patched in 2.8.5
  55. Patched High · 7.2 Elementor Website Builder <= 2.8.3 - Cross-Site Scripting ↗
    2020-01-19 CVE-2020-7109 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.3 Patched in 2.8.4
  56. Patched High · 8.8 Elementor Website Builder <= 2.7.4 - Arbitrary File Upload ↗
    2019-10-28 CVE-2020-7055 Missing Authorization Affects < 2.7.5 Patched in 2.7.5
  57. Patched High · 8.8 Elementor Website Builder <= 1.7.12 - Missing Authorization ↗
    2017-11-27 CVE-2017-18596 Missing Authorization Affects <= 1.7.12 Patched in 1.8.0

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Languages

via translate.wordpress.org

Translated into 90 languages, 17 at 90% or more

English (UK) 100%
Galician 100%
Portuguese (Brazil) 100%
Russian 100%
Serbian 100%
Spanish (Mexico) 100%
Spanish (Spain) 100%
Turkish 100%
Chinese (Taiwan) 99%
French (France) 99%
Romanian 97%
Dutch 94%
Dutch (Formal) 91%
Italian 90%
Japanese 90%
Korean 90%
Spanish (Chile) 90%
Ukrainian 89%
Spanish (Argentina) 88%
Lao 87%
Swedish 87%
Chinese (China) 84%
Persian 83%
Vietnamese 82%

Plus 66 more locales with partial translations.

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Premium

Share of voice

How often each assistant names Elementor Website Builder when asked about these topics, where it comes in the answer, and how that compares with its wp.org search position. Latest run 1 Nov 2026.

Assistants
ChatGPT, Claude
Topics tracked
Gallery, Page builder, Social feeds, AI, Table of contents, Performance, Image optimization, Landing pages, Product feeds
Get early access to Premium →

Readme readiness

7 of 8 pass · checked 27 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ✓ Says what it does "The Elementor Website Builder has it all: drag and drop page builder, Atomic Editor, pixel perfect design,..."
  • ✓ Has a FAQ 13 questions in the FAQ.
  • ✓ FAQ asks real questions 13 of 13 read like questions a user would type.
  • ! Names who it is for Never says who the plugin is for or what they use it for.
  • ✓ Names what it works with Mentions WooCommerce, Elementor, Stripe, PayPal and 12 more.
  • ✓ Headings and lists 11 headings and 8 lists.
  • ✓ Enough to quote 16,349 characters of description.
  • ✓ Tags match the text 4 of 5 tags appear in the text; "landing page" does not.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2024-05-23 5M+ → 10M+ up after 1422 days in tier
  2. 2020-07-01 4M+ → 5M+ up after 151 days in tier
  3. 2020-02-01 2M+ → 4M+ up after 215 days in tier
  4. 2019-07-01 1M+ → 2M+ up after 334 days in tier
  5. 2018-08-01 900K+ → 1M+ up after 28 days in tier
  6. 2018-07-04 800K+ → 900K+ up after 33 days in tier
  7. 2018-06-01 700K+ → 800K+ up after 31 days in tier
  8. 2018-05-01 600K+ → 700K+ up after 30 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Elementor Website Builder – more than just a page builder into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/elementor" width="480" height="300" style="border:0" loading="lazy" title="Elementor Website Builder – more than just a page builder — Plugin Pulse"></iframe>
Preview card ↗

Elementor Website Builder – more than just a page builder: 10M+ active installs, 4.5★ (7,322 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/elementor

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.