Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 48% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ samthedev

   2mo ago

   The most compelling reason why I chose this addon over others was because “Custom CSS” editor was included as a free feature. Time to move on.

   Read on wp.org ↗
2. ★★★★★ commercecopilot

   6mo ago

   Outstanding function and form across the board. Expected since the same level of quality is throughout their other plugins as well. Together the whole system steps up the WP game, and support answers quickly and always accomdiating.

   Read on wp.org ↗
3. ★★★★★ winkler37

   8mo ago

   If the questions are too difficult, you won’t get an answer.Don’t be fooled, this is a bad product! That doesn’t sound good at all, no response at all. Why aren’t you responding? I want my money back! This topic was modified 6 months, 3 weeks ago by winkler37. This topic was modified 5 months, 4 weeks ago by winkler37. Reason: Really bad product

   Read on wp.org ↗
4. ★★★★★ alvaro_mds

   9mo ago

   The plugin works perfectly and the support team responds quickly.

   Read on wp.org ↗
5. ★★★★★ cguinn

   10mo ago

   The live preview and drag-and-drop features make editing navigation so much faster. Definitely one of the best UI-friendly menu tools out there.

   Read on wp.org ↗
6. ★★★★★ hopsenrobsen

   10mo ago

   As far as i can tell, this plugin works great! Thx so much!

   Read on wp.org ↗
7. ★★★★★ theme555

   10mo ago

   Hello, don’t be boredIn the Master Addon plugin, the display Conditions feature of the term section does not work at all. It does not show a specific category or can be shown on a specific page or cannot be displayed. None of its features work.Be sure to check and fix this in the next updateThank you

   Read on wp.org ↗
8. ★★★★★ jvgraphix

   1.0y ago

   Great plug-in. Recommended

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.6 Fixed: Blog Posts widget date, author, category, and tag links now open the correct archive, including for custom post types (the post type is kept in the link). Fixed: Blog Posts pagination now counts only the posts the 1.6
2. — Version 1.5 Security: Made the Recommended Plugins screen safer so only the plugins we list can be installed or activated. Security: Tightened the Mega Menu so it only responds to its own known actions. Security: Added safety checks 1.5
3. — Version 1.4 Security: Moved the Custom CSS editor to the Pro build (no arbitrary CSS insertion in the free plugin). Security: Added nonce verification to Mega Menu options save. Security: Added capability checks to popup, template-s 1.4
4. — Version 3.1.3 Added: Timeline widget Title and Content typography and color controls (Cards section), applied to both Post and Custom timeline items. Security: Hardened popup list sorting so it only accepts known sort options. Securit 3.1.3
5. — Version 1.7 Fixed: Imported widget builder json file infinite loading in elementor editor issue fixed. Fixed: Widget Builder CSS & JS unlock Pro & Includes lock to pro badge. 1.7
6. — Version 1.8 Added: Widget Builder custom CSS and JavaScript are now free for everyone. Fixed: Widget Builder custom JavaScript no longer breaks on the frontend, so effects and animations run as expected. Fixed: One widget’s JavaScri 1.8

28 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 Master Addons For Elementor <= 3.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'jtlma_custom_js' Page Setting (Custom JS Extension) ↗
   2026-06-05 CVE-2026-9281 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.0 Patched in 3.1.1
2. Medium · 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter ↗
   2026-04-30 CVE-2024-13362 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.7.2 Patched in 2.0.7.3
3. Medium · 6.4 Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits <= 2.1.3 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2026-03-16 CVE-2026-32462 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.3 Patched in 2.1.4
4. Medium · 6.4 Master Addons For Elementor <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text' ↗
   2026-02-19 CVE-2026-2486 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.1 Patched in 2.1.2
5. Medium · 5.3 Master Addons for Elementor <= 2.0.9.9.4 - Unauthenticated Insecure Direct Object Reference ↗
   2025-12-31 CVE-2025-63053 Authorization Bypass Through User-Controlled Key Affects <= 2.0.9.9.4 Patched in 2.1.0
6. Medium · 6.4 Master Addons for Elementor <= 2.0.9.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-12-05 CVE-2025-63055 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.9.9.3 Patched in 2.1.0
7. Medium · 6.4 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox ↗
   2025-08-11 CVE-2025-8874 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.9.0 Patched in 2.0.9.1
8. Medium · 6.4 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-07-15 CVE-2025-5284 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.8.2 Patched in 2.0.8.3
9. Medium · 6.4 Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets ↗
   2025-03-03 CVE-2024-9618 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.7.2 Patched in 2.0.7.3
10. Medium · 6.4 Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter ↗
    2025-03-03 CVE-2025-0433 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.7.1 Patched in 2.0.7.2
11. Medium · 6.4 Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module ↗
    2025-01-06 CVE-2024-9502 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.6.7 Patched in 2.0.6.8
12. Medium · 6.4 Master Addons for Elementor <= 2.0.9.9.4 - Authenticated (Author+) Stored Cross-Site Scripting ↗
    2024-11-11 CVE-2024-52387 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.9.9.4 Patched in 2.1.0
13. Medium · 5.4 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element ↗
    2024-09-09 CVE-2024-6282 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.6.4 Patched in 2.0.6.5
14. Medium · 6.4 Master Addons for Elementor <= 2.0.6.2 - Authenticated (Author+) Stored Cross-Site Scripting ↗
    2024-07-11 CVE-2024-38710 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.6.2 Patched in 2.0.6.3
15. High · 7.2 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget ↗
    2024-06-06 CVE-2024-5542 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.6.1 Patched in 2.0.6.2
16. Medium · 6.5 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification ↗
    2024-06-06 CVE-2024-5382 Missing Authorization Affects <= 2.0.6.1 Patched in 2.0.6.2
17. Medium · 5.3 Master Addons for Elementor <= 2.0.5.4.1 - Missing Authorization via get_jltma_save_menuitem_settings() ↗
    2024-06-03 CVE-2024-35660 Missing Authorization Affects <= 2.0.5.4.1 Patched in 2.0.5.6
18. Medium · 6.4 Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-05-16 CVE-2024-3134 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.6.0 Patched in 2.0.6.1
19. Medium · 6.4 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-05-15 CVE-2024-4580 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.6.0 Patched in 2.0.6.1
20. Medium · 6.4 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting ↗
    2024-04-29 CVE-2024-4265 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.5.9 Patched in 2.0.6.0
21. Medium · 4.3 Master Addons for Elementor <= 2.0.5.4.1 - Missing Authorization on Duplicate Post ↗
    2024-04-25 CVE-2024-33595 Missing Authorization Affects <= 2.0.5.4.1 Patched in 2.0.5.6
22. Medium · 6.4 Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget ↗
    2024-03-26 CVE-2024-2139 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.5.6 Patched in 2.0.5.7
23. Medium · 6.4 Master Addons for Elementor <= 2.0.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-03-25 CVE-2024-29911 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.5.4.1 Patched in 2.0.5.6
24. Medium · 6.4 Master Addons for Elementor <= 2.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting ↗
    2023-10-11 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.3 Patched in 2.0.4
25. High · 7.3 Master Addons for Elementor <= 2.0.5.3 - Missing Authorization ↗
    2023-08-22 CVE-2023-40679 Missing Authorization Affects <= 2.0.5.3 Patched in 2.0.5.4.1
26. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 1.0.6 - 2.0.2 Patched in 2.0.3
27. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 1.8.5 Patched in 1.8.5
28. Medium · 6.1 Master Addons for Elementor <= 1.8.1 - Reflected Cross-Site Scripting ↗
    2022-02-21 CVE-2022-0327 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.8.5 Patched in 1.8.5

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 6 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-01-30 40K+ → 30K+ down after 359 days in tier
2. 2025-02-05 30K+ → 40K+ up after 282 days in tier
3. 2024-04-29 40K+ → 30K+ down after 5 days in tier
4. 2024-04-24 30K+ → 40K+ up after 3 days in tier
5. 2024-04-21 40K+ → 30K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor 1M+ installs · 4.9★ · 3 shared tags A
• Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder 2M+ installs · 4.9★ · 2 shared tags A
• Essential Addons for Elementor – Popular Elementor Templates & Widgets 1M+ installs · 4.9★ · 2 shared tags A
• Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools 600K+ installs · 4.9★ · 2 shared tags A
• Royal Addons for Elementor – Addons and Templates Kit for Elementor 600K+ installs · 4.8★ · 2 shared tags A
• Unlimited Elements For Elementor 300K+ installs · 4.8★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits into a readme, a review or a deck. It updates itself.

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits: 30K+ active installs, 4.5★ (212 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/master-addons