Royal Addons for Elementor – Addons and Templates Kit for Elementor

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 92% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

Reviewers keep giving five stars, praising the free widget selection, the ready-made templates, and a site that stays fast, with nothing negative in this set.

1. ★★★★★ olgunya

   1mo ago

   Мне нравится!

   Read on wp.org ↗
2. ★★★★★ arthurceolin

   2mo ago

   Very good

   Read on wp.org ↗
3. ★★★★★ saylow

   3mo ago

   I’ve been using Royal Addons for Elementor for a while now, and it has completely transformed my workflow. This plugin delivers an impressive collection of widgets and templates that seamlessly integrate with Elementor, making it incredibly easy to build professional-looking websites without any coding.

   Read on wp.org ↗
4. ★★★★★ dcodeify

   3mo ago

   Classic setting features and a solid library to showcase.

   Read on wp.org ↗
5. ★★★★★ monikitescq1

   4mo ago

   Gracias por darnos asistencia

   Read on wp.org ↗
6. ★★★★★ Craig Anthony

   4mo ago

   I haven’t had the chance to do an extensive deep dive with the add-ons, but what I have experienced I found to be quite pleasing and simple to use. The add ons are. making my site move clunky, which usually a big problem with most add ons. These are just doing their thing without interruption. Good job Elementor, can’t wait to do my dive. This topic was modified 6 days, 22 hours ago by Craig Anthony.

   Read on wp.org ↗
7. ★★★★★ ma3pa

   5mo ago

   I’m really considering get pro. Work’s perfectly for free.

   Read on wp.org ↗
8. ★★★★★ Priyadarshini Biswal

   5mo ago

   I’ve been using Royal Elementor Addons for a while now, and it honestly made designing with Elementor so much easier. Everything feels smooth and simple to use, even without much technical knowledge. It’s a solid plugin if you want to create good-looking websites without overcomplicating things.

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-17 Version 7.1066 FIXED: Bugs and Minor issues. 7.1066
2. 2026-08-07 Version 7.1065 ADDED: Elementor Template Kit: Digital Marketing Agency V5 – Digital Marketing Agency V5 . ADDED: Elementor Template Kit: Hotel V3 – Hotel V3 . ADDED: Wooshop V3 – Elementor Template Kit Wooshop V3 . ADDED: Elementor Tem 7.1065
3. 2026-06-25 Version 7.1064 ADDED: Elementor Template Kit: Jewelry V3 – Jewelry V3 . ADDED: Elementor Template Kit: Skincare V2 – Skincare V2 . 7.1064
4. 2026-06-08 Version 7.1063 FIXED: Minor Vulnerebilities FIXED: Minor Bugs ADDED: Google Review Widget (PRO) ADDED: Global Styles now available in Theme Builder Templates 7.1063
5. 2026-05-22 Version 7.1062 ADDED: Elementor Template Kit: School V2 – School V2 . 7.1062
6. 2026-05-20 Version 7.1061 TESTED:Tested up to new WP 7.0 7.1061

86 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Authenticated (Administrator+) Remote Code Execution ↗
   2026-08-21 CVE-2026-13405 Improper Control of Generation of Code ('Code Injection') Affects < 1.7.1066 Patched in 1.7.1066
2. High · 8.8 Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting ↗
   2026-08-15 CVE-2026-17123 Server-Side Request Forgery (SSRF) Affects <= 1.7.1064 Patched in 1.7.1065
3. Medium · 6.4 Royal Elementor Addons <= 1.7.1064 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-08-10 CVE-2026-19217 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1064 Patched in 1.7.1065
4. Medium · 5.3 Royal Elementor Addons <= 1.7.1062 - Unauthenticated Information Exposure ↗
   2026-06-26 CVE-2026-13402 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.7.1062 Patched in 1.7.1063
5. Medium · 6.5 Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source ↗
   2026-06-18 CVE-2026-8118 External Control of File Name or Path Affects 1.7.1058 - 1.7.1059 Patched in 1.7.1060
6. Medium · 6.4 Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter ↗
   2026-05-13 CVE-2026-6504 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1058 Patched in 1.7.1059
7. Medium · 5.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Missing Authorization ↗
   2026-05-07 CVE-2026-25436 Missing Authorization Affects < 1.7.1053 Patched in 1.7.1053
8. Medium · 6.4 Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-05-07 CVE-2026-27421 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.7.1053 Patched in 1.7.1053
9. Medium · 6.4 Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter ↗
   2026-05-04 CVE-2026-5159 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1056 Patched in 1.7.1057
10. High · 7.2 Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta ↗
    2026-05-04 CVE-2026-4803 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1056 Patched in 1.7.1057
11. Medium · 5.3 Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification ↗
    2026-05-01 CVE-2026-4024 Missing Authorization Affects <= 1.7.1056 Patched in 1.7.1057
12. High · 7.2 Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter ↗
    2026-05-01 CVE-2026-6229 Server-Side Request Forgery (SSRF) Affects <= 1.7.1057 Patched in 1.7.1058
13. Medium · 6.4 Royal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Field ↗
    2026-04-23 CVE-2026-5428 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1056 Patched in 1.7.1057
14. Medium · 6.4 Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget ↗
    2026-04-16 CVE-2026-5162 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1056 Patched in 1.7.1057
15. High · 7.2 Royal Elementor Addons < 1.7.1041 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-04-16 CVE-2026-40720 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.7.1041 Patched in 1.7.1041
16. Medium · 6.4 Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass ↗
    2026-04-03 CVE-2026-0664 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1049 Patched in 1.7.1050
17. Medium · 5.3 Royal Elementor Addons <= 1.7.1056 - Missing Authorization ↗
    2026-03-31 CVE-2026-40763 Missing Authorization Affects <= 1.7.1056 Patched in 1.7.1057
18. Medium · 5.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure ↗
    2026-03-16 CVE-2026-2373 Missing Authorization Affects <= 1.7.1049 Patched in 1.7.1050
19. High · 8.8 Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass ↗
    2026-03-10 CVE-2025-13067 Unrestricted Upload of File with Dangerous Type Affects <= 1.7.1049 Patched in 1.7.1050
20. Medium · 5.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1052 - Missing Authorization ↗
    2026-02-26 CVE-2026-28135 Missing Authorization Affects <= 1.7.1052 Patched in 1.7.1053
21. Medium · 5.3 Royal Elementor Addons and Templates <= 1.7.1036 - Missing Authorization to Unauthenticated Media File Upload ↗
    2025-11-24 CVE-2025-11363 Missing Authorization Affects <= 1.7.1036 Patched in 1.7.1037
22. Medium · 6.4 Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library ↗
    2025-11-19 CVE-2025-5092 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1031 Patched in 1.7.1032
23. Medium · 6.4 Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-11-18 CVE-2025-6251 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1036 Patched in 1.7.1037
24. Medium · 6.4 Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets ↗
    2025-06-25 CVE-2025-5338 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1028 Patched in 1.7.1029
25. Medium · 6.4 Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-05-30 CVE-2025-3813 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1020 Patched in 1.7.1021
26. Medium · 6.4 Royal Elementor Addons <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-05-07 CVE-2025-39361 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1017 Patched in 1.7.1018
27. Medium · 5.4 Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-05-06 CVE-2024-12120 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1017 Patched in 1.7.1018
28. Medium · 6.4 Royal Elementor Addons <= 1.3.977 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-04-16 CVE-2025-39543 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.977 Patched in 1.3.979
29. Medium · 5.5 Royal Elementor Addons <= 1.7.1006 - Authenticated (Admin+) Server Side Request Forgery ↗
    2025-04-11 CVE-2025-26990 Server-Side Request Forgery (SSRF) Affects <= 1.7.1006 Patched in 1.7.1007
30. Medium · 6.4 Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-04-11 CVE-2025-1455 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1012 Patched in 1.7.1013
31. Medium · 6.4 Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting ↗
    2025-04-11 CVE-2025-1456 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1012 Patched in 1.7.1013
32. Medium · 6.1 Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting ↗
    2025-02-18 CVE-2025-1441 Cross-Site Request Forgery (CSRF) Affects <= 1.7.1007 Patched in 1.7.1008
33. Medium · 6.1 Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting ↗
    2025-01-13 CVE-2025-0393 Cross-Site Request Forgery (CSRF) Affects <= 1.7.1006 Patched in 1.7.1007
34. Medium · 6.1 Royal Elementor Addons <= 1.7.1001 - Reflected Cross-Site Scripting ↗
    2024-12-19 CVE-2024-56226 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1001 Patched in 1.7.1002
35. Medium · 4.3 Royal Elementor Addons <= 1.7.1001 - Missing Authorization ↗
    2024-12-19 CVE-2024-56227 Missing Authorization Affects <= 1.7.1001 Patched in 1.7.1002
36. Medium · 6.4 Royal Elementor Addons <= 1.3.987 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-12-18 CVE-2024-56062 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.987 Patched in 1.7.1
37. Medium · 4.3 Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure ↗
    2024-11-27 CVE-2024-10798 Authorization Bypass Through User-Controlled Key Affects <= 1.7.1003 Patched in 1.7.1004
38. Medium · 6.4 Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget ↗
    2024-11-12 CVE-2024-9059 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1001 Patched in 1.7.1002
39. Medium · 6.4 Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget ↗
    2024-11-12 CVE-2024-9668 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1001 Patched in 1.7.1002
40. Medium · 6.4 Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget ↗
    2024-11-12 CVE-2024-9682 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1001 Patched in 1.7.1002
41. Medium · 5.4 Royal Elementor Addons <= 1.3.980 - Authenticated (Author+) External Entity Injection ↗
    2024-10-24 CVE-2024-50442 Improper Restriction of XML External Entity Reference Affects <= 1.3.980 Patched in 1.3.981
42. Medium · 4.3 Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure ↗
    2024-10-16 CVE-2024-7417 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.3.986 Patched in 1.3.987
43. Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget ↗
    2024-10-07 CVE-2024-8482 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.986 Patched in 1.3.987
44. Medium · 6.4 Royal Elementor Addons <= 1.3.982 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-08-29 CVE-2024-44001 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.982 Patched in 1.3.985
45. Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget ↗
    2024-07-23 CVE-2024-5818 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.980 Patched in 1.3.981
46. Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads ↗
    2024-06-06 CVE-2024-4489 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.976 Patched in 1.3.977
47. Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-06-06 CVE-2024-4488 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.976 Patched in 1.3.977
48. Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget ↗
    2024-05-31 CVE-2024-4087 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.975 Patched in 1.3.976
49. Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-05-31 CVE-2024-4342 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.975 Patched in 1.3.976
50. Medium · 5.4 Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget ↗
    2024-05-15 CVE-2024-3887 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.974 Patched in 1.3.975
51. Medium · 5.3 Royal Elementor Addons <= 1.3.93 - Unauthenticated IP Spoofing ↗
    2024-04-22 CVE-2024-32786 Use of Less Trusted Source Affects <= 1.3.93 Patched in 1.3.95
52. Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes ↗
    2024-04-22 CVE-2024-3675 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.971 Patched in 1.3.972
53. Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags ↗
    2024-04-22 CVE-2024-2799 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.971 Patched in 1.3.972
54. Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting ↗
    2024-04-22 CVE-2024-2798 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.971 Patched in 1.3.972
55. Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags ↗
    2024-04-22 CVE-2024-3889 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.971 Patched in 1.3.972
56. High · 8.2 Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload ↗
    2024-04-19 CVE-2024-1567 Unrestricted Upload of File with Dangerous Type Affects <= 1.3.94 Patched in 1.3.95
57. Medium · 6.4 Royal Elementor Addons <= 1.3.93 - Authenticated (Contributor+) Stored Cross-Site Scriting ↗
    2024-04-05 CVE-2024-31236 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.93 Patched in 1.3.95
58. Medium · 5.4 Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget ↗
    2024-03-06 CVE-2024-1500 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.91 Patched in 1.3.92
59. Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-02-08 CVE-2024-0442 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.87 Patched in 1.3.88
60. Medium · 4.3 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist ↗
    2024-02-07 CVE-2024-0513 Cross-Site Request Forgery (CSRF) Affects <= 1.3.87 Patched in 1.3.88
61. Medium · 4.3 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare ↗
    2024-02-07 CVE-2024-0515 Cross-Site Request Forgery (CSRF) Affects <= 1.3.87 Patched in 1.3.88
62. Medium · 4.3 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare ↗
    2024-02-07 CVE-2024-0514 Cross-Site Request Forgery (CSRF) Affects <= 1.3.87 Patched in 1.3.88
63. Medium · 4.3 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist ↗
    2024-02-07 CVE-2024-0512 Cross-Site Request Forgery (CSRF) Affects <= 1.3.87 Patched in 1.3.88
64. Medium · 5.3 Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta ↗
    2024-02-07 CVE-2024-0516 Cross-Site Request Forgery (CSRF) Affects <= 1.3.87 Patched in 1.3.88
65. Medium · 4.3 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta ↗
    2024-02-07 CVE-2024-0511 Cross-Site Request Forgery (CSRF) Affects <= 1.3.87 Patched in 1.3.88
66. Medium · 5.3 Royal Elementor Addons and Templates <= 1.3.80 - Missing Authorization to Private/Password Protected Post Read ↗
    2023-12-06 CVE-2023-5922 Authorization Bypass Through User-Controlled Key Affects <= 1.3.80 Patched in 1.3.81
67. Critical · 9.8 Royal Elementor Addons and Templates <= 1.3.78 - Unauthenticated Arbitrary File Upload ↗
    2023-10-09 CVE-2023-5360 Unrestricted Upload of File with Dangerous Type Affects <= 1.3.78 Patched in 1.3.79
68. Medium · 4.3 Royal Elementor Addons <= 1.3.75 - Cross-Site Request Forgery ↗
    2023-08-22 CVE-2022-47175 Cross-Site Request Forgery (CSRF) Affects <= 1.3.75 Patched in 1.3.76
69. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 1.3 - 1.3.70 Patched in 1.3.71
70. Medium · 5.3 Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure ↗
    2023-07-17 CVE-2023-3709 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.3.70 Patched in 1.3.71
71. Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation ↗
    2023-01-10 CVE-2022-4705 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
72. Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation ↗
    2023-01-10 CVE-2022-4707 Cross-Site Request Forgery (CSRF) Affects <= 1.3.59 Patched in 1.3.60
73. Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation ↗
    2023-01-10 CVE-2022-4701 Improper Authorization Affects <= 1.3.59 Patched in 1.3.60
74. Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion ↗
    2023-01-10 CVE-2022-4703 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
75. Medium · 5.4 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import ↗
    2023-01-10 CVE-2022-4704 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
76. Medium · 6.1 Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting ↗
    2023-01-10 CVE-2022-4710 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.59 Patched in 1.3.60
77. Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification ↗
    2023-01-10 CVE-2022-4708 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
78. Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update ↗
    2023-01-10 CVE-2022-4711 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
79. Medium · 5.4 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation ↗
    2023-01-10 CVE-2022-4702 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
80. Medium · 5.4 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation ↗
    2023-01-10 CVE-2022-4700 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
81. Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import ↗
    2023-01-10 CVE-2022-4709 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
82. High · 8.1 Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery ↗
    2022-12-15 CVE-2022-4102 Cross-Site Request Forgery (CSRF) Affects <= 1.3.55 Patched in 1.3.56
83. High · 8.1 Royal Elementor Addons <=1.3.55 - Authenticated (Subscriber+) Arbitrary Post Deletion ↗
    2022-12-15 CVE-2022-4102 Missing Authorization Affects <= 1.3.55 Patched in 1.3.56
84. Medium · 6.5 Royal Elementor Addons <=1.3.55 - Missing Authorization to Subscriber+ Arbitrary Post Creation ↗
    2022-12-15 CVE-2022-4103 Missing Authorization Affects <= 1.3.55 Patched in 1.3.56
85. High · 8.8 Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery ↗
    2022-12-06 Cross-Site Request Forgery (CSRF) Affects <= 1.3.55 Patched in 1.3.56
86. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 1.3.33 Patched in 1.3.33

Automated install-time checks, tested on PHP 8.1.12 · WP 6.6.2

Translated into 22 languages, 4 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-23 700K+ → 600K+ down after 1 days in tier
2. 2026-04-22 600K+ → 700K+ up after 364 days in tier
3. 2025-04-23 500K+ → 600K+ up after 140 days in tier
4. 2024-12-04 400K+ → 500K+ up after 168 days in tier
5. 2024-06-19 300K+ → 400K+ up after 154 days in tier
6. 2024-01-17 200K+ → 300K+ up after 205 days in tier
7. 2023-06-26 100K+ → 200K+ up after 218 days in tier
8. 2022-11-20 90K+ → 100K+ up after 26 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder 2M+ installs · 4.9★ · 5 shared tags A
• Essential Addons for Elementor – Popular Elementor Templates & Widgets 1M+ installs · 4.9★ · 4 shared tags A
• Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools 600K+ installs · 4.9★ · 4 shared tags A
• Unlimited Elements For Elementor 300K+ installs · 4.8★ · 4 shared tags B
• The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce 100K+ installs · 4.6★ · 4 shared tags A
• PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) 70K+ installs · 4.8★ · 4 shared tags A

Embed this report card

Drop a live Pulse card for Royal Addons for Elementor – Addons and Templates Kit for Elementor into a readme, a review or a deck. It updates itself.

Royal Addons for Elementor – Addons and Templates Kit for Elementor: 600K+ active installs, 4.8★ (611 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/royal-elementor-addons