Plugin Pulse Beta
← Pulse

Royal Addons for Elementor – Addons and Templates Kit for Elementor

by WP Royal · Page Builders

Also makes 4 other plugins · 637.6K+ installs across the portfolio →

Try it live ↗ wp.org ↗

Elementor templates, Header footer builder, Elementor Post Grid, Woocommerce Grid builder, Slider, Forms, Gallery, Nav menu addons, Elementor widgets.

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

Health

A 95/100

no flags

Active installs

600K+

≈650K estimated

Momentum

-15%

downloads vs prior 30d

Biggest opportunity: Rating quality scores 95/100. Lift the average: resolve the issues driving the low reviews.

See the detail → Get the free audit
How scoring works →
95 Health · A
Maintenance 100/100
Rating quality 96/100
Support 100/100
Security 75/100

95 health vs 72 average across 1,890 Page Builders plugins

600K+

Active installs

≈650K estimated

20.6M

Total downloads

since 2021 · 2.9% still active

4.8/5

Rating

612 reviews

-15%

407.2K

Downloads · 30d

category median +15%

Install conversion

How it's measured →

2.9%

of downloads still active

At least 600K of 20.6M lifetime downloads are still running, in line with its category: the median Page Builders plugin keeps 2.4%, across 1,263 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Page Builders plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 34 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Ratings · 612 reviews

Read on wp.org ↗
5★
568 4★
13 3★
6 2★
4 1★
21

Details

Version
1.7.1070
Last updated
8d ago
Added
2021-06-07 · 5 yrs old
Requires WP
5.0
Tested up to
7.1.4
Requires PHP
5.6
Changelog ↗Support forum ↗Reviews ↗Advanced stats ↗

Recent review vibe

read from the latest 12 reviews to 2026-07-20
Positive PraisePerformancePricing

Reviewers keep giving five stars, praising the free widget selection, the ready-made templates, and a site that stays fast, with nothing negative in this set.

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

99 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100

Updated 8 days ago

WP compatibility 100/100

Tested up to WordPress 7.1.4, the current branch or newer

Rating quality 95/100

4.8★ over 612 reviews, smoothed to 4.75★

Listing tuning 100/100

5 of 5 tags set · short description in place

Support resolution 100/100

6 of 6 support threads resolved in the last 2 months

Daily downloads

Since 5 Oct 2022 · 1,488 days · wp.org + Plugin Pulse archive

-15% vs prior 30d
6.7K31 Oct 2026

30-day downloads

Rolling 30-day volume · peak 1.1M · peaks are release surges

403.7K31 Oct 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Royal Addons for Ele · #103youUltimate Addons for · #26Essential Addons for · #29Unlimited Elements f · #182

Rating trend

Star average over time · dips mark rough releases

4.831 Oct 2026

Health trend

Composite health score, snapshotted daily

9531 Oct 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

67331 Oct 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

34

releases in the last 12 months

8d ago

latest release · v1.7.1070 · 23 Oct 2026

171

tagged releases on record

Recent releases

1.7.1070 · 23 Oct 20261.7.1069 · 15 Oct 20261.7.1068 · 18 Sep 20261.7.1067 · 7 Sep 20261.7.1066 · 17 Aug 20261.7.1065 · 7 Aug 20261.7.1064 · 25 Jun 20261.7.1063 · 8 Jun 20261.7.1062 · 22 May 20261.7.1061 · 20 May 20261.7.1060 · 15 May 20261.7.1059 · 7 May 20261.7.1058 · 24 Apr 20261.7.1057 · 10 Apr 2026

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 92% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v1.7 92%
v1.3 8.4%
Older / other versions 0%

Estimated active installs

The public count shows “600K+”. Our estimate pins where the real number sits.

tracked estimate
600K–700K ≈650K

Crossed into this band 6 months ago; a band this size takes about a year or more to cross, which places it about 50% of the way through.

Install history since 13 Aug 2021

600K31 Oct 2026

Recent reviews

All reviews on wp.org ↗
  1. ★★★★★ olgunya
    3mo ago

    Мне нравится!

    Read on wp.org ↗
  2. ★★★★★ arthurceolin
    5mo ago

    Very good

    Read on wp.org ↗
  3. ★★★★★ saylow
    5mo ago

    I’ve been using Royal Addons for Elementor for a while now, and it has completely transformed my workflow. This plugin delivers an impressive collection of widgets and templates that seamlessly integrate with Elementor, making it incredibly easy to build professional-looking websites without any coding.

    Read on wp.org ↗
  4. ★★★★★ dcodeify
    6mo ago

    Classic setting features and a solid library to showcase.

    Read on wp.org ↗
  5. ★★★★★ monikitescq1
    6mo ago

    Gracias por darnos asistencia

    Read on wp.org ↗
  6. ★★★★★ Craig Anthony
    6mo ago

    I haven’t had the chance to do an extensive deep dive with the add-ons, but what I have experienced I found to be quite pleasing and simple to use. The add ons are. making my site move clunky, which usually a big problem with most add ons. These are just doing their thing without interruption. Good job Elementor, can’t wait to do my dive. This topic was modified 6 days, 22 hours ago by Craig Anthony.

    Read on wp.org ↗
  7. ★★★★★ ma3pa
    7mo ago

    I’m really considering get pro. Work’s perfectly for free.

    Read on wp.org ↗
  8. ★★★★★ Priyadarshini Biswal
    7mo ago

    I’ve been using Royal Elementor Addons for a while now, and it honestly made designing with Elementor so much easier. Everything feels smooth and simple to use, even without much technical knowledge. It’s a solid plugin if you want to create good-looking websites without overcomplicating things.

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. 2026-10-23 Version 7.1070 FIXED: Minor Bugs 7.1070
  2. 2026-10-15 Version 7.1069 FIXED: Minor Bugs ADDED: Furniture Shop V3 – Elementor Template Kit – Furniture Store V3 . 7.1069
  3. 2026-09-18 Version 7.1068 ADDED: Electronic Store V4 – Elementor Template Kit – Electronic Store V4 . ADDED: Elementor Fashion (Shop) V6 Template Kit – Fashion V6 . ADDED: Construction v4 Elementor Templates Kit – Construction v4 FIXED: Bugs and 7.1068
  4. 2026-09-07 Version 7.1067 FIXED: Bugs and Minor issues. 7.1067
  5. 2026-08-17 Version 7.1066 FIXED: Bugs and Minor issues. 7.1066
  6. 2026-08-07 Version 7.1065 ADDED: Elementor Template Kit: Digital Marketing Agency V5 – Digital Marketing Agency V5 . ADDED: Elementor Template Kit: Hotel V3 – Hotel V3 . ADDED: Wooshop V3 – Elementor Template Kit Wooshop V3 . ADDED: Elementor Tem 7.1065

Security history

via Wordfence Intelligence

All 100 disclosed vulnerabilities are patched in the current version (1.7.1070). Sites still on an older version should update.

  1. Patched Medium · 6.4 Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1037 - 1.7.1069 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-10-28 CVE-2026-107098 Improper Neutralization of Input During Web Page Generation Affects 1.7.1037 - 1.7.1069 Patched in 1.7.1070
  2. Patched Medium · 5.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.3.71 - 1.7.1069 - Missing Authorization ↗
    2026-10-28 CVE-2026-107097 Missing Authorization Affects 1.3.71 - 1.7.1069 Patched in 1.7.1070
  3. Patched Medium · 5.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.3.81 - 1.7.1069 - Unauthenticated Information Exposure ↗
    2026-10-28 CVE-2026-107100 Exposure of Sensitive Information to an Unauthorized Actor Affects 1.3.81 - 1.7.1069 Patched in 1.7.1070
  4. Patched Medium · 4.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.3.68 - 1.7.1069 - Missing Authorization ↗
    2026-10-28 CVE-2026-106647 Missing Authorization Affects 1.3.68 - 1.7.1069 Patched in 1.7.1070
  5. Patched Medium · 5.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1069 - Unauthenticated Insecure Direct Object Reference ↗
    2026-10-26 CVE-2026-97255 Authorization Bypass Through User-Controlled Key Affects <= 1.7.1069 Patched in 1.7.1070
  6. Patched Medium · 6.4 Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1069 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-10-26 CVE-2026-97254 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1069 Patched in 1.7.1070
  7. Patched Medium · 6.4 Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1069 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-10-26 CVE-2026-112865 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1069 Patched in 1.7.1070
  8. Patched Medium · 5.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1070 - Unauthenticated Unauthorized Email Relay ↗
    2026-10-26 CVE-2026-106648 Missing Authorization Affects < 1.7.1070 Patched in 1.7.1070
  9. Patched High · 8.8 Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1068 - Authenticated (Contributor+) Remote Code Execution ↗
    2026-10-20 CVE-2026-111851 Improper Control of Generation of Code Affects <= 1.7.1068 Patched in 1.7.1069
  10. Patched High · 7.2 Royal Elementor Addons <= 1.7.1066 - Unauthenticated Arbitrary HTML Injection in Notification Emails ↗
    2026-09-14 CVE-2026-13407 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1066 Patched in 1.7.1067
  11. Patched Medium · 5.3 Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter ↗
    2026-09-11 CVE-2026-17585 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.7.1066 Patched in 1.7.1067
  12. Patched Medium · 5.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Missing Authorization ↗
    2026-08-26 CVE-2026-13406 Missing Authorization Affects < 1.7.1066 Patched in 1.7.1066
  13. Patched Medium · 6.4 Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-08-26 CVE-2026-19226 Improper Neutralization of Input During Web Page Generation Affects < 1.7.1066 Patched in 1.7.1066
  14. Patched Medium · 5.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Unauthenticated Like Count Manipulation ↗
    2026-08-24 CVE-2026-13404 Missing Authorization Affects < 1.7.1066 Patched in 1.7.1066
  15. Patched High · 7.2 Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Authenticated (Administrator+) Remote Code Execution ↗
    2026-08-21 CVE-2026-13405 Improper Control of Generation of Code Affects < 1.7.1066 Patched in 1.7.1066
  16. Patched High · 8.8 Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting ↗
    2026-08-15 CVE-2026-17123 Server-Side Request Forgery Affects <= 1.7.1064 Patched in 1.7.1065
  17. Patched Medium · 6.4 Royal Elementor Addons <= 1.7.1064 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-08-10 CVE-2026-19217 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1064 Patched in 1.7.1065
  18. Patched Medium · 5.3 Royal Elementor Addons <= 1.7.1062 - Unauthenticated Information Exposure ↗
    2026-06-26 CVE-2026-13402 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.7.1062 Patched in 1.7.1063
  19. Patched Medium · 6.5 Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source ↗
    2026-06-18 CVE-2026-8118 External Control of File Name or Path Affects 1.7.1058 - 1.7.1059 Patched in 1.7.1060
  20. Patched Medium · 6.4 Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter ↗
    2026-05-13 CVE-2026-6504 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1058 Patched in 1.7.1059
  21. Patched Medium · 5.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Missing Authorization ↗
    2026-05-07 CVE-2026-25436 Missing Authorization Affects < 1.7.1053 Patched in 1.7.1053
  22. Patched Medium · 6.4 Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-05-07 CVE-2026-27421 Improper Neutralization of Input During Web Page Generation Affects < 1.7.1053 Patched in 1.7.1053
  23. Patched Medium · 6.4 Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter ↗
    2026-05-04 CVE-2026-5159 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1056 Patched in 1.7.1057
  24. Patched High · 7.2 Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta ↗
    2026-05-04 CVE-2026-4803 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1056 Patched in 1.7.1057
  25. Patched Medium · 5.3 Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification ↗
    2026-05-01 CVE-2026-4024 Missing Authorization Affects <= 1.7.1056 Patched in 1.7.1057
  26. Patched High · 7.2 Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter ↗
    2026-05-01 CVE-2026-6229 Server-Side Request Forgery Affects <= 1.7.1057 Patched in 1.7.1058
  27. Patched Medium · 6.4 Royal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Field ↗
    2026-04-23 CVE-2026-5428 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1056 Patched in 1.7.1057
  28. Patched Medium · 6.4 Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget ↗
    2026-04-16 CVE-2026-5162 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1056 Patched in 1.7.1057
  29. Patched High · 7.2 Royal Elementor Addons < 1.7.1041 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-04-16 CVE-2026-40720 Improper Neutralization of Input During Web Page Generation Affects < 1.7.1041 Patched in 1.7.1041
  30. Patched Medium · 6.4 Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass ↗
    2026-04-03 CVE-2026-0664 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1049 Patched in 1.7.1050
  31. Patched Medium · 5.3 Royal Elementor Addons <= 1.7.1056 - Missing Authorization ↗
    2026-03-31 CVE-2026-40763 Missing Authorization Affects <= 1.7.1056 Patched in 1.7.1057
  32. Patched Medium · 5.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure ↗
    2026-03-16 CVE-2026-2373 Missing Authorization Affects <= 1.7.1049 Patched in 1.7.1050
  33. Patched High · 8.8 Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass ↗
    2026-03-10 CVE-2025-13067 Unrestricted Upload of File with Dangerous Type Affects <= 1.7.1049 Patched in 1.7.1050
  34. Patched Medium · 5.3 Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1052 - Missing Authorization ↗
    2026-02-26 CVE-2026-28135 Missing Authorization Affects <= 1.7.1052 Patched in 1.7.1053
  35. Patched Medium · 5.3 Royal Elementor Addons and Templates <= 1.7.1036 - Missing Authorization to Unauthenticated Media File Upload ↗
    2025-11-24 CVE-2025-11363 Missing Authorization Affects <= 1.7.1036 Patched in 1.7.1037
  36. Patched Medium · 6.4 Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library ↗
    2025-11-19 CVE-2025-5092 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1031 Patched in 1.7.1032
  37. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-11-18 CVE-2025-6251 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1036 Patched in 1.7.1037
  38. Patched Medium · 6.4 Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets ↗
    2025-06-25 CVE-2025-5338 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1028 Patched in 1.7.1029
  39. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-05-30 CVE-2025-3813 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1020 Patched in 1.7.1021
  40. Patched Medium · 6.4 Royal Elementor Addons <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-05-07 CVE-2025-39361 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1017 Patched in 1.7.1018
  41. Patched Medium · 5.4 Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-05-06 CVE-2024-12120 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1017 Patched in 1.7.1018
  42. Patched Medium · 6.4 Royal Elementor Addons <= 1.3.977 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-04-16 CVE-2025-39543 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.977 Patched in 1.3.979
  43. Patched Medium · 5.5 Royal Elementor Addons <= 1.7.1006 - Authenticated (Admin+) Server Side Request Forgery ↗
    2025-04-11 CVE-2025-26990 Server-Side Request Forgery Affects <= 1.7.1006 Patched in 1.7.1007
  44. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-04-11 CVE-2025-1455 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1012 Patched in 1.7.1013
  45. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting ↗
    2025-04-11 CVE-2025-1456 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1012 Patched in 1.7.1013
  46. Patched Medium · 6.1 Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting ↗
    2025-02-18 CVE-2025-1441 Cross-Site Request Forgery Affects <= 1.7.1007 Patched in 1.7.1008
  47. Patched Medium · 6.1 Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting ↗
    2025-01-13 CVE-2025-0393 Cross-Site Request Forgery Affects <= 1.7.1006 Patched in 1.7.1007
  48. Patched Medium · 6.1 Royal Elementor Addons <= 1.7.1001 - Reflected Cross-Site Scripting ↗
    2024-12-19 CVE-2024-56226 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1001 Patched in 1.7.1002
  49. Patched Medium · 4.3 Royal Elementor Addons <= 1.7.1001 - Missing Authorization ↗
    2024-12-19 CVE-2024-56227 Missing Authorization Affects <= 1.7.1001 Patched in 1.7.1002
  50. Patched Medium · 6.4 Royal Elementor Addons <= 1.3.987 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-12-18 CVE-2024-56062 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.987 Patched in 1.7.1
  51. Patched Medium · 4.3 Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure ↗
    2024-11-27 CVE-2024-10798 Authorization Bypass Through User-Controlled Key Affects <= 1.7.1003 Patched in 1.7.1004
  52. Patched Medium · 6.4 Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget ↗
    2024-11-12 CVE-2024-9059 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1001 Patched in 1.7.1002
  53. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget ↗
    2024-11-12 CVE-2024-9668 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1001 Patched in 1.7.1002
  54. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget ↗
    2024-11-12 CVE-2024-9682 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1001 Patched in 1.7.1002
  55. Patched Medium · 5.4 Royal Elementor Addons <= 1.3.980 - Authenticated (Author+) External Entity Injection ↗
    2024-10-24 CVE-2024-50442 Improper Restriction of XML External Entity Reference Affects <= 1.3.980 Patched in 1.3.981
  56. Patched Medium · 4.3 Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure ↗
    2024-10-16 CVE-2024-7417 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.3.986 Patched in 1.3.987
  57. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget ↗
    2024-10-07 CVE-2024-8482 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.986 Patched in 1.3.987
  58. Patched Medium · 6.4 Royal Elementor Addons <= 1.3.982 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-08-29 CVE-2024-44001 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.982 Patched in 1.3.985
  59. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget ↗
    2024-07-23 CVE-2024-5818 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.980 Patched in 1.3.981
  60. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads ↗
    2024-06-06 CVE-2024-4489 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.976 Patched in 1.3.977
  61. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-06-06 CVE-2024-4488 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.976 Patched in 1.3.977
  62. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget ↗
    2024-05-31 CVE-2024-4087 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.975 Patched in 1.3.976
  63. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-05-31 CVE-2024-4342 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.975 Patched in 1.3.976
  64. Patched Medium · 5.4 Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget ↗
    2024-05-15 CVE-2024-3887 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.974 Patched in 1.3.975
  65. Patched Medium · 5.3 Royal Elementor Addons <= 1.3.93 - Unauthenticated IP Spoofing ↗
    2024-04-22 CVE-2024-32786 Use of Less Trusted Source Affects <= 1.3.93 Patched in 1.3.95
  66. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes ↗
    2024-04-22 CVE-2024-3675 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.971 Patched in 1.3.972
  67. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags ↗
    2024-04-22 CVE-2024-2799 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.971 Patched in 1.3.972
  68. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting ↗
    2024-04-22 CVE-2024-2798 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.971 Patched in 1.3.972
  69. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags ↗
    2024-04-22 CVE-2024-3889 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.971 Patched in 1.3.972
  70. Patched High · 8.2 Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload ↗
    2024-04-19 CVE-2024-1567 Unrestricted Upload of File with Dangerous Type Affects <= 1.3.94 Patched in 1.3.95
  71. Patched Medium · 6.4 Royal Elementor Addons <= 1.3.93 - Authenticated (Contributor+) Stored Cross-Site Scriting ↗
    2024-04-05 CVE-2024-31236 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.93 Patched in 1.3.95
  72. Patched Medium · 5.4 Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget ↗
    2024-03-06 CVE-2024-1500 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.91 Patched in 1.3.92
  73. Patched Medium · 6.4 Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-02-08 CVE-2024-0442 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.87 Patched in 1.3.88
  74. Patched Medium · 4.3 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist ↗
    2024-02-07 CVE-2024-0513 Cross-Site Request Forgery Affects <= 1.3.87 Patched in 1.3.88
  75. Patched Medium · 4.3 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare ↗
    2024-02-07 CVE-2024-0515 Cross-Site Request Forgery Affects <= 1.3.87 Patched in 1.3.88
  76. Patched Medium · 4.3 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare ↗
    2024-02-07 CVE-2024-0514 Cross-Site Request Forgery Affects <= 1.3.87 Patched in 1.3.88
  77. Patched Medium · 4.3 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist ↗
    2024-02-07 CVE-2024-0512 Cross-Site Request Forgery Affects <= 1.3.87 Patched in 1.3.88
  78. Patched Medium · 5.3 Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta ↗
    2024-02-07 CVE-2024-0516 Cross-Site Request Forgery Affects <= 1.3.87 Patched in 1.3.88
  79. Patched Medium · 4.3 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta ↗
    2024-02-07 CVE-2024-0511 Cross-Site Request Forgery Affects <= 1.3.87 Patched in 1.3.88
  80. Patched Medium · 5.3 Royal Elementor Addons and Templates <= 1.3.80 - Missing Authorization to Private/Password Protected Post Read ↗
    2023-12-06 CVE-2023-5922 Authorization Bypass Through User-Controlled Key Affects <= 1.3.80 Patched in 1.3.81
  81. Patched Critical · 9.8 Royal Elementor Addons and Templates <= 1.3.78 - Unauthenticated Arbitrary File Upload ↗
    2023-10-09 CVE-2023-5360 Unrestricted Upload of File with Dangerous Type Affects <= 1.3.78 Patched in 1.3.79
  82. Patched Medium · 4.3 Royal Elementor Addons <= 1.3.75 - Cross-Site Request Forgery ↗
    2023-08-22 CVE-2022-47175 Cross-Site Request Forgery Affects <= 1.3.75 Patched in 1.3.76
  83. Patched Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation Affects 1.3 - 1.3.70 Patched in 1.3.71
  84. Patched Medium · 5.3 Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure ↗
    2023-07-17 CVE-2023-3709 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.3.70 Patched in 1.3.71
  85. Patched Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation ↗
    2023-01-10 CVE-2022-4705 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
  86. Patched Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation ↗
    2023-01-10 CVE-2022-4707 Cross-Site Request Forgery Affects <= 1.3.59 Patched in 1.3.60
  87. Patched Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation ↗
    2023-01-10 CVE-2022-4701 Improper Authorization Affects <= 1.3.59 Patched in 1.3.60
  88. Patched Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion ↗
    2023-01-10 CVE-2022-4703 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
  89. Patched Medium · 5.4 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import ↗
    2023-01-10 CVE-2022-4704 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
  90. Patched Medium · 6.1 Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting ↗
    2023-01-10 CVE-2022-4710 Improper Neutralization of Input During Web Page Generation Affects <= 1.3.59 Patched in 1.3.60
  91. Patched Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification ↗
    2023-01-10 CVE-2022-4708 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
  92. Patched Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update ↗
    2023-01-10 CVE-2022-4711 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
  93. Patched Medium · 5.4 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation ↗
    2023-01-10 CVE-2022-4702 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
  94. Patched Medium · 5.4 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation ↗
    2023-01-10 CVE-2022-4700 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
  95. Patched Medium · 4.3 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import ↗
    2023-01-10 CVE-2022-4709 Improper Access Control Affects <= 1.3.59 Patched in 1.3.60
  96. Patched High · 8.1 Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery ↗
    2022-12-15 CVE-2022-4102 Cross-Site Request Forgery Affects <= 1.3.55 Patched in 1.3.56
  97. Patched High · 8.1 Royal Elementor Addons <=1.3.55 - Authenticated (Subscriber+) Arbitrary Post Deletion ↗
    2022-12-15 CVE-2022-4102 Missing Authorization Affects <= 1.3.55 Patched in 1.3.56
  98. Patched Medium · 6.5 Royal Elementor Addons <=1.3.55 - Missing Authorization to Subscriber+ Arbitrary Post Creation ↗
    2022-12-15 CVE-2022-4103 Missing Authorization Affects <= 1.3.55 Patched in 1.3.56
  99. Patched High · 8.8 Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery ↗
    2022-12-06 Cross-Site Request Forgery Affects <= 1.3.55 Patched in 1.3.56
  100. Patched Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 1.3.33 Patched in 1.3.33

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 6.6.2

✓ Low memory footprint
✓ Low page-speed impact
✓ Runs on latest PHP + WP
✓ No PHP errors
✓ No JS errors
✓ Activates cleanly
✓ No resource errors
✓ No external HTTP errors
✓ Optimized database use
✓ Frequently updated

Languages

via translate.wordpress.org

Translated into 24 languages, 8 at 90% or more

Dutch 100%
Dutch (Formal) 100%
English (UK) 100%
Galician 100%
Serbian 100%
Spanish (Chile) 100%
Spanish (Spain) 100%
Lao 99%
English (Australia) 88%
Russian 83%
Swedish 51%
German 46%
Ukrainian 40%
English (South Africa) 39%
French (France) 39%
Italian 39%
Norwegian (Nynorsk) 39%
Portuguese (Brazil) 39%
Portuguese (Portugal) 39%
Spanish (Venezuela) 39%
English (Canada) 38%
English (New Zealand) 38%
Pirate 38%
Spanish (Ecuador) 38%

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Premium

Share of voice

How often each assistant names Royal Addons for Elementor when asked about these topics, where it comes in the answer, and how that compares with its wp.org search position. Latest run 25 Oct 2026.

Assistants
ChatGPT, Claude
Topics tracked
Slider, Landing pages
Get early access to Premium →

Readme readiness

6 of 8 pass · checked 27 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ! Says what it does Short description names no action; say what the plugin does for the site.
  • ✓ Has a FAQ 10 questions in the FAQ.
  • ✓ FAQ asks real questions 10 of 10 read like questions a user would type.
  • ! Names who it is for One audience phrase ("who want"); say who the plugin is for and what they use it for.
  • ✓ Names what it works with Mentions WooCommerce, Elementor, Contact Form 7, Ninja Forms and 5 more.
  • ✓ Headings and lists 11 headings and 8 lists.
  • ✓ Enough to quote 15,178 characters of description.
  • ✓ Tags match the text All 5 tags appear in the text.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2026-04-23 700K+ → 600K+ down after 1 days in tier
  2. 2026-04-22 600K+ → 700K+ up after 364 days in tier
  3. 2025-04-23 500K+ → 600K+ up after 140 days in tier
  4. 2024-12-04 400K+ → 500K+ up after 168 days in tier
  5. 2024-06-19 300K+ → 400K+ up after 154 days in tier
  6. 2024-01-17 200K+ → 300K+ up after 205 days in tier
  7. 2023-06-26 100K+ → 200K+ up after 218 days in tier
  8. 2022-11-20 90K+ → 100K+ up after 26 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Royal Addons for Elementor – Addons and Templates Kit for Elementor into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/royal-elementor-addons" width="480" height="300" style="border:0" loading="lazy" title="Royal Addons for Elementor – Addons and Templates Kit for Elementor — Plugin Pulse"></iframe>
Preview card ↗

Royal Addons for Elementor – Addons and Templates Kit for Elementor: 600K+ active installs, 4.8★ (612 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/royal-elementor-addons

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.