Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

544 searches this plugin appeared in over the last 90 days, 20 listed. 486 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 9 months ago; a band this size takes about a year or more to cross, which places it about 50% of the way through.

1. ★★★★★ samthedev

   4mo ago

   The most compelling reason why I chose this addon over others was because “Custom CSS” editor was included as a free feature. Time to move on.

   Read on wp.org ↗
2. ★★★★★ commercecopilot

   8mo ago

   Outstanding function and form across the board. Expected since the same level of quality is throughout their other plugins as well. Together the whole system steps up the WP game, and support answers quickly and always accomdiating.

   Read on wp.org ↗
3. ★★★★★ winkler37

   10mo ago

   If the questions are too difficult, you won’t get an answer.Don’t be fooled, this is a bad product! That doesn’t sound good at all, no response at all. Why aren’t you responding? I want my money back! This topic was modified 6 months, 3 weeks ago by winkler37. This topic was modified 5 months, 4 weeks ago by winkler37. Reason: Really bad product

   Read on wp.org ↗
4. ★★★★★ alvaro_mds

   11mo ago

   The plugin works perfectly and the support team responds quickly.

   Read on wp.org ↗
5. ★★★★★ cguinn

   12mo ago

   The live preview and drag-and-drop features make editing navigation so much faster. Definitely one of the best UI-friendly menu tools out there.

   Read on wp.org ↗
6. ★★★★★ hopsenrobsen

   12mo ago

   As far as i can tell, this plugin works great! Thx so much!

   Read on wp.org ↗
7. ★★★★★ theme555

   1.0y ago

   Hello, don’t be boredIn the Master Addon plugin, the display Conditions feature of the term section does not work at all. It does not show a specific category or can be shown on a specific page or cannot be displayed. None of its features work.Be sure to check and fix this in the next updateThank you

   Read on wp.org ↗
8. ★★★★★ jvgraphix

   1.2y ago

   Great plug-in. Recommended

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.6 Fixed: Blog Posts widget date, author, category, and tag links now open the correct archive, including for custom post types (the post type is kept in the link). Fixed: Blog Posts pagination now counts only the posts the 1.6
2. — Version 1.5 Security: Made the Recommended Plugins screen safer so only the plugins we list can be installed or activated. Security: Tightened the Mega Menu so it only responds to its own known actions. Security: Added safety checks 1.5
3. — Version 1.4 Security: Moved the Custom CSS editor to the Pro build (no arbitrary CSS insertion in the free plugin). Security: Added nonce verification to Mega Menu options save. Security: Added capability checks to popup, template-s 1.4
4. — Version 3.1.3 Added: Timeline widget Title and Content typography and color controls (Cards section), applied to both Post and Custom timeline items. Security: Hardened popup list sorting so it only accepts known sort options. Securit 3.1.3
5. — Version 1.7 Fixed: Imported widget builder json file infinite loading in elementor editor issue fixed. Fixed: Widget Builder CSS & JS unlock Pro & Includes lock to pro badge. 1.7
6. — Version 1.8 Added: Widget Builder custom CSS and JavaScript are now free for everyone. Fixed: Widget Builder custom JavaScript no longer breaks on the frontend, so effects and animations run as expected. Fixed: One widget’s JavaScri 1.8

All 32 disclosed vulnerabilities are patched in the current version (3.2.3). Sites still on an older version should update.

1. Patched High · 8.1 Master Addons for Elementor <= 3.2.2 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification/Deletion via 'popup_id' Parameter ↗
   2026-09-17 CVE-2026-85410 Missing Authorization Affects <= 3.2.2 Patched in 3.2.3
2. Patched Medium · 5.3 Master Addons for Elementor <= 3.1.8 - Missing Authorization ↗
   2026-09-15 CVE-2026-91015 Missing Authorization Affects <= 3.1.8 Patched in 3.1.9
3. Patched Medium · 4.3 Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits <= 3.2.2 - Missing Authorization ↗
   2026-09-11 CVE-2026-62089 Missing Authorization Affects <= 3.2.2 Patched in 3.2.3
4. Patched High · 7.2 Master Addons for Elementor <= 3.1.9 - Incorrect Authorization to Authenticated (Editor+) Arbitrary File Upload via upload_template_kit AJAX ZIP Extraction ↗
   2026-08-31 CVE-2026-75921 Incorrect Authorization Affects <= 3.1.9 Patched in 3.2.0
5. Patched Medium · 6.4 Master Addons For Elementor <= 3.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'jtlma_custom_js' Page Setting (Custom JS Extension) ↗
   2026-06-05 CVE-2026-9281 Improper Neutralization of Input During Web Page Generation Affects <= 3.1.0 Patched in 3.1.1
6. Patched Medium · 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter ↗
   2026-04-30 CVE-2024-13362 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.7.2 Patched in 2.0.7.3
7. Patched Medium · 6.4 Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits <= 2.1.3 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2026-03-16 CVE-2026-32462 Improper Neutralization of Input During Web Page Generation Affects <= 2.1.3 Patched in 2.1.4
8. Patched Medium · 6.4 Master Addons For Elementor <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text' ↗
   2026-02-19 CVE-2026-2486 Improper Neutralization of Input During Web Page Generation Affects <= 2.1.1 Patched in 2.1.2
9. Patched Medium · 5.3 Master Addons for Elementor <= 2.0.9.9.4 - Unauthenticated Insecure Direct Object Reference ↗
   2025-12-31 CVE-2025-63053 Authorization Bypass Through User-Controlled Key Affects <= 2.0.9.9.4 Patched in 2.1.0
10. Patched Medium · 6.4 Master Addons for Elementor <= 2.0.9.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-12-05 CVE-2025-63055 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.9.9.3 Patched in 2.1.0
11. Patched Medium · 6.4 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox ↗
    2025-08-11 CVE-2025-8874 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.9.0 Patched in 2.0.9.1
12. Patched Medium · 6.4 Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-07-15 CVE-2025-5284 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.8.2 Patched in 2.0.8.3
13. Patched Medium · 6.4 Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets ↗
    2025-03-03 CVE-2024-9618 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.7.2 Patched in 2.0.7.3
14. Patched Medium · 6.4 Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter ↗
    2025-03-03 CVE-2025-0433 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.7.1 Patched in 2.0.7.2
15. Patched Medium · 6.4 Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module ↗
    2025-01-06 CVE-2024-9502 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.6.7 Patched in 2.0.6.8
16. Patched Medium · 6.4 Master Addons for Elementor <= 2.0.9.9.4 - Authenticated (Author+) Stored Cross-Site Scripting ↗
    2024-11-11 CVE-2024-52387 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.9.9.4 Patched in 2.1.0
17. Patched Medium · 5.4 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-jltma-wrapper-link Element ↗
    2024-09-09 CVE-2024-6282 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.6.4 Patched in 2.0.6.5
18. Patched Medium · 6.4 Master Addons for Elementor <= 2.0.6.2 - Authenticated (Author+) Stored Cross-Site Scripting ↗
    2024-07-11 CVE-2024-38710 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.6.2 Patched in 2.0.6.3
19. Patched High · 7.2 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget ↗
    2024-06-06 CVE-2024-5542 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.6.1 Patched in 2.0.6.2
20. Patched Medium · 6.5 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification ↗
    2024-06-06 CVE-2024-5382 Missing Authorization Affects <= 2.0.6.1 Patched in 2.0.6.2
21. Patched Medium · 5.3 Master Addons for Elementor <= 2.0.5.4.1 - Missing Authorization via get_jltma_save_menuitem_settings() ↗
    2024-06-03 CVE-2024-35660 Missing Authorization Affects <= 2.0.5.4.1 Patched in 2.0.5.6
22. Patched Medium · 6.4 Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-05-16 CVE-2024-3134 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.6.0 Patched in 2.0.6.1
23. Patched Medium · 6.4 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-05-15 CVE-2024-4580 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.6.0 Patched in 2.0.6.1
24. Patched Medium · 6.4 Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting ↗
    2024-04-29 CVE-2024-4265 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.5.9 Patched in 2.0.6.0
25. Patched Medium · 4.3 Master Addons for Elementor <= 2.0.5.4.1 - Missing Authorization on Duplicate Post ↗
    2024-04-25 CVE-2024-33595 Missing Authorization Affects <= 2.0.5.4.1 Patched in 2.0.5.6
26. Patched Medium · 6.4 Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget ↗
    2024-03-26 CVE-2024-2139 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.5.6 Patched in 2.0.5.7
27. Patched Medium · 6.4 Master Addons for Elementor <= 2.0.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-03-25 CVE-2024-29911 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.5.4.1 Patched in 2.0.5.6
28. Patched Medium · 6.4 Master Addons for Elementor <= 2.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting ↗
    2023-10-11 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.3 Patched in 2.0.4
29. Patched High · 7.3 Master Addons for Elementor <= 2.0.5.3 - Missing Authorization ↗
    2023-08-22 CVE-2023-40679 Missing Authorization Affects <= 2.0.5.3 Patched in 2.0.5.4.1
30. Patched Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation Affects 1.0.6 - 2.0.2 Patched in 2.0.3
31. Patched Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 1.8.5 Patched in 1.8.5
32. Patched Medium · 6.1 Master Addons for Elementor <= 1.8.1 - Reflected Cross-Site Scripting ↗
    2022-02-21 CVE-2022-0327 Improper Neutralization of Input During Web Page Generation Affects < 1.8.5 Patched in 1.8.5

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 6 languages, 1 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-01-30 40K+ → 30K+ down after 359 days in tier
2. 2025-02-05 30K+ → 40K+ up after 282 days in tier
3. 2024-04-29 40K+ → 30K+ down after 5 days in tier
4. 2024-04-24 30K+ → 40K+ up after 3 days in tier
5. 2024-04-21 40K+ → 30K+ down after 662 days in tier
6. 2022-06-29 30K+ → 40K+ up after 276 days in tier
7. 2021-09-26 20K+ → 30K+ up after 136 days in tier
8. 2021-05-13 10K+ → 20K+ up after 204 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits into a readme, a review or a deck. It updates itself.

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits: 30K+ active installs, 4.5★ (212 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/master-addons