Unlimited Elements For Elementor

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 70% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ crystalm36

   2mo ago

   I am so happy that I found this little gem of a plugin! So many useful widgets to choose to incorporate in your web designs. And their customer support is wonderful, they are easy to reach and they respond quickly. They have a very friendly team that are ready and willing to help and this means so much to the web designer. I would give them more than a five star rating if I could! I just want to tell the team at unlimited elements thank you for making such a great plugin and thank you for the great customer support. I highly recommend you!

   Read on wp.org ↗
2. ★★★★★ ryanduncan

   2mo ago

   Truly a great plugin but it keeps loading my library with inundated images and now i see forums that recomend I switch off dynamic source but to go find every element where I have used this plugin now is such a tedious task to say the least my only issue would be why have the developers not ensured this does not happen as im having to delete around 1000 images every 2 weeks from my library and its horribly frustrating to the point i question if the great features this plugin offers are even worthwhile.I now have an additional plugin running to manage this plugin and all the duplicate images it loads to my library which is craxy that i need a plugin to keep another plugin in check.Otherwise id rate this a 5 star as the features are amazing however its support is very much lacking unfortunately in conflict issues as well as i came to realize. the attitude is if you dont like it remove it and thats that really.

   Read on wp.org ↗
3. ★★★★★ popcut

   2mo ago

   Great support and fast service—very straightforward

   Read on wp.org ↗
4. ★★★★★ freshview

   3mo ago

   Amazing selection of widgets that transforms Elementor into a powerhouse for designing fantastic looking sites. The support if needed is also great, with efficient responses to tickets and issues. Highly recommend this plugin provider.

   Read on wp.org ↗
5. ★★★★★ techniktante

   4mo ago

   The plugin itself is incredibly powerful and flexible, but what truly sets it apart is the amazing support team behind it. They actually understand real-world issues and know exactly how to solve them—instantly and efficiently. Response times are super fast, and every interaction feels personal and genuinely helpful. Highly recommended for anyone looking to take their website to the next level!

   Read on wp.org ↗
6. ★★★★★ webster_321

   5mo ago

   Very timely response and Denys was extremely helpful.

   Read on wp.org ↗
7. ★★★★★ pytermedia

   6mo ago

   We had a problem with the filter tabs. We got a really fast help and we could fix everything. Really great! We love the plugin.

   Read on wp.org ↗
8. ★★★★★ bholabhala

   6mo ago

   “FREE” Label is just for show. The so called FREE features have severe limitations built-in to a point, where is pointless to use

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-23 Version 2.0.17 Plugin Changes: Fix: made some small security related fix Fix: disabled the public ajax action for logged out users Fix: added permission check to get addon config html Fix: keep the port in base url so post filters ajax 2.0.17
2. 2026-07-30 Version 2.0.16 Plugin Changes: Feature: added option for google calendar Feature: added option for filter by meta Fix: fixed another security issue Widgets Changes: Feature: Radio Button Field (Free) – Added a Radio Layout Type – Butto 2.0.16
3. 2026-07-22 Version 2.0.15 Feature: added option for youtube playlist Fix: fixed one security issue 2.0.15
4. 2026-07-21 Version 2.0.14 Plugin Changes Feature: added option: number of requests for serp api Fix: fixed dynamic controls color for dynamic loop Fix: fixed “and” clouser inside a filter checkbox group Fix: fixed the “get_items” bug for ajax Fix 2.0.14
5. 2026-07-01 Version 2.0.13 Fix: fixed gallery output Fix: fixed small security issue 2.0.13
6. 2026-06-29 Version 2.0.12 Plugin Changes: Fix: improved api requests. it should not cache the requests if some error response. Change: increased the limit of get selected terms option to 60 from 10 inside the editor Change: streighten some securi 2.0.12

39 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Unlimited Elements For Elementor <= 2.0.15 - Missing Authorization ↗
   2026-08-03 CVE-2026-28147 Missing Authorization Affects <= 2.0.15 Patched in 2.0.16
2. Medium · 6.5 Unlimited Elements For Elementor <= 2.0.14 - Authenticated (Contributor+) Arbitrary File Download ↗
   2026-08-03 CVE-2026-28146 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 2.0.14 Patched in 2.0.15
3. High · 7.2 Unlimited Elements For Elementor <= 2.0.12 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-09 CVE-2026-57718 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.12 Patched in 2.0.13
4. High · 7.2 Unlimited Elements for Elementor <= 2.0.10 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-06-29 CVE-2026-10081 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.10 Patched in 2.0.11
5. Medium · 6.5 Unlimited Elements For Elementor <= 2.0.8 - Authenticated (Contributor+) SQL Injection ↗
   2026-05-26 CVE-2026-48837 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.0.8 Patched in 2.0.9
6. Medium · 6.5 Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter ↗
   2026-05-13 CVE-2026-5486 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.0.7 Patched in 2.0.8
7. Medium · 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter ↗
   2026-04-30 CVE-2024-13362 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.140 Patched in 1.5.141
8. High · 7.5 Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal ↗
   2026-04-16 CVE-2026-4659 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 2.0.6 Patched in 2.0.7
9. High · 7.2 Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields ↗
   2026-03-09 CVE-2026-2724 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.5 Patched in 2.0.6
10. Medium · 5.4 Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget ↗
    2026-02-02 CVE-2025-14274 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.1 Patched in 2.0.2
11. High · 7.2 Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload ↗
    2025-11-26 CVE-2025-13692 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0 Patched in 2.0.1
12. Medium · 6.4 Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-08-27 CVE-2025-8603 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.148 Patched in 1.5.149
13. Medium · 6.4 Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-04-02 CVE-2025-1663 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.142 Patched in 1.5.143
14. Medium · 6.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget ↗
    2025-02-19 CVE-2024-13155 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.140 Patched in 1.5.141
15. Medium · 6.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets ↗
    2025-01-08 CVE-2024-13153 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.135 Patched in 1.5.136
16. Medium · 6.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-12-11 CVE-2024-10784 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.126 Patched in 1.5.127
17. High · 7.2 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.121 - Authenticated (Editor+) Remote Code Execution ↗
    2024-10-14 CVE-2024-49271 Improper Control of Generation of Code ('Code Injection') Affects <= 1.5.121 Patched in 1.5.122
18. Medium · 6.1 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.121 - Reflected Cross-Site Scripting ↗
    2024-09-30 CVE-2024-45454 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.121 Patched in 1.5.122
19. Medium · 5.3 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass ↗
    2024-07-08 CVE-2024-6171 Use of Less Trusted Source Affects <= 1.5.112 Patched in 1.5.113
20. High · 8.8 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection ↗
    2024-07-08 CVE-2024-6166 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.5.112 Patched in 1.5.113
21. Medium · 6.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email' ↗
    2024-07-08 CVE-2024-6170 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.112 Patched in 1.5.113
22. Medium · 6.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username' ↗
    2024-07-08 CVE-2024-6169 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.112 Patched in 1.5.113
23. High · 8.8 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter ↗
    2024-06-05 CVE-2024-5329 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.5.109 Patched in 1.5.110
24. Medium · 4.3 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Information Exposure ↗
    2024-06-05 CVE-2024-35674 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.5.109 Patched in 1.5.110
25. Medium · 5.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field ↗
    2024-05-29 CVE-2024-3190 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.107 Patched in 1.5.108
26. High · 8.8 Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import ↗
    2024-05-28 CVE-2023-6743 Improper Neutralization of Special Elements Used in a Template Engine Affects <= 1.5.89 Patched in 1.5.91
27. High · 8.8 Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0] ↗
    2024-05-22 CVE-2024-4779 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.5.107 Patched in 1.5.108
28. High · 8.8 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection ↗
    2024-05-10 CVE-2024-3055 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.5.102 Patched in 1.5.105
29. High · 7.2 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection ↗
    2024-05-09 CVE-2024-2662 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Affects <= 1.5.102 Patched in 1.5.103
30. Medium · 6.1 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting ↗
    2024-05-09 CVE-2024-3547 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.102 Patched in 1.5.103
31. Medium · 6.4 Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link ↗
    2024-03-29 CVE-2024-0367 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.96 Patched in 1.5.97
32. Medium · 6.1 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.93 - Reflected Cross-Site Scripting ↗
    2024-03-25 CVE-2024-29792 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.93 Patched in 1.5.94
33. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.74 Patched in 1.5.75
34. Medium · 6.3 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.65 - Missing Authorization ↗
    2023-06-20 CVE-2023-31080 Missing Authorization Affects <= 1.5.65 Patched in 1.5.66
35. High · 8.8 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload ↗
    2023-06-16 CVE-2023-3295 Unrestricted Upload of File with Dangerous Type Affects <= 1.5.66 Patched in 1.5.67
36. Critical · 9.9 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.60 - Arbitrary File Upload in File Manager ↗
    2023-05-22 CVE-2023-31090 Unrestricted Upload of File with Dangerous Type Affects <= 1.5.60 Patched in 1.5.61
37. Critical · 9.9 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Zip Extraction to Arbitrary File Upload in File Manager ↗
    2023-05-22 CVE-2023-33930 Unrestricted Upload of File with Dangerous Type Affects <= 1.5.66 Patched in 1.5.67
38. Medium · 4.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.48 - Authenticated (Admin+) Cross Site Scripting (XSS) ↗
    2023-01-27 CVE-2022-47170 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.48 Patched in 1.5.49
39. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 1.5.3 Patched in 1.5.3

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 19 languages, 7 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-02-12 200K+ → 300K+ up after 74 days in tier
2. 2024-11-30 300K+ → 200K+ down after 59 days in tier
3. 2024-10-02 200K+ → 300K+ up after 581 days in tier
4. 2023-03-01 100K+ → 200K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce 100K+ installs · 4.6★ · 5 shared tags A
• King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder 10K+ installs · 3.6★ · 5 shared tags B
• Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder 2M+ installs · 4.9★ · 4 shared tags A
• Essential Addons for Elementor – Popular Elementor Templates & Widgets 1M+ installs · 4.9★ · 4 shared tags A
• Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools 600K+ installs · 4.9★ · 4 shared tags A
• Royal Addons for Elementor – Addons and Templates Kit for Elementor 600K+ installs · 4.8★ · 4 shared tags A

Embed this report card

Drop a live Pulse card for Unlimited Elements For Elementor into a readme, a review or a deck. It updates itself.

Unlimited Elements For Elementor: 300K+ active installs, 4.8★ (521 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/unlimited-elements-for-elementor