Royal Addons for Elementor – Addons and Templates Kit for Elementor

94 Quality Score

Active Installs

26/30

With 600,000 active installs, it is well established, though still a third of the install base of Essential Addons for Elementor or Ultimate Addons for Elementor.

Update Freshness

25/25

Updated June 2026 and tested with WordPress 7.0, which signals very active upkeep from the developer.

User Rating

14/15

A 96 out of 100 from 609 reviews is a strong rating, indicating users are broadly satisfied with the features and stability.

Support Health

14/15

All 14 support threads in the tracked period were resolved, which is a perfect support health score, though the low thread volume is itself worth noting.

WP Compatibility

15/15

Compatibility scores full marks with a low PHP 5.6 requirement and testing against the latest WordPress, making it accessible to older hosting environments.

Scores higher than 99% of indexed plugins

About

Elementor templates, Header footer builder, Elementor Post Grid, Woocommerce Grid builder, Slider, Forms, Gallery, Nav menu addons, Elementor widgets.

Active Installs 600k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-18 1:05pm GMT

Requires WordPress 5.0+

Tested Up To 7.1.1

Requires PHP 5.6+

Security History

91 known vulnerabilities, all patched

1 Critical 11 High 79 Medium

Most recent: September 14, 2026

View details ▸

Royal Elementor Addons <= 1.7.1066 - Unauthenticated Arbitrary HTML Injection in Notification Emails High

September 14, 2026 Patched in ["1.7.1067"] CVE-2026-13407

Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter Medium

September 11, 2026 Patched in ["1.7.1067"] CVE-2026-17585

Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Missing Authorization Medium

August 26, 2026 Patched in ["1.7.1066"] CVE-2026-13406

Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 26, 2026 Patched in ["1.7.1066"] CVE-2026-19226

Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Unauthenticated Like Count Manipulation Medium

August 24, 2026 Patched in ["1.7.1066"] CVE-2026-13404

Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Authenticated (Administrator+) Remote Code Execution High

August 21, 2026 Patched in ["1.7.1066"] CVE-2026-13405

Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting High

August 15, 2026 Patched in ["1.7.1065"] CVE-2026-17123

Royal Elementor Addons <= 1.7.1064 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 10, 2026 Patched in ["1.7.1065"] CVE-2026-19217

Royal Elementor Addons <= 1.7.1062 - Unauthenticated Information Exposure Medium

June 26, 2026 Patched in ["1.7.1063"] CVE-2026-13402

Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source Medium

June 18, 2026 Patched in ["1.7.1060"] CVE-2026-8118

Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter Medium

May 13, 2026 Patched in ["1.7.1059"] CVE-2026-6504

Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Missing Authorization Medium

May 7, 2026 Patched in ["1.7.1053"] CVE-2026-25436

Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 7, 2026 Patched in ["1.7.1053"] CVE-2026-27421

Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter Medium

May 4, 2026 Patched in ["1.7.1057"] CVE-2026-5159

Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta High

May 4, 2026 Patched in ["1.7.1057"] CVE-2026-4803

Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification Medium

May 1, 2026 Patched in ["1.7.1057"] CVE-2026-4024

Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter High

May 1, 2026 Patched in ["1.7.1058"] CVE-2026-6229

Royal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Field Medium

April 23, 2026 Patched in ["1.7.1057"] CVE-2026-5428

Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget Medium

April 16, 2026 Patched in ["1.7.1057"] CVE-2026-5162

Royal Elementor Addons < 1.7.1041 - Unauthenticated Stored Cross-Site Scripting High

April 16, 2026 Patched in ["1.7.1041"] CVE-2026-40720

Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass Medium

April 3, 2026 Patched in ["1.7.1050"] CVE-2026-0664

Royal Elementor Addons <= 1.7.1056 - Missing Authorization Medium

March 31, 2026 Patched in ["1.7.1057"] CVE-2026-40763

Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure Medium

March 16, 2026 Patched in ["1.7.1050"] CVE-2026-2373

Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass High

March 10, 2026 Patched in ["1.7.1050"] CVE-2025-13067

Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1052 - Missing Authorization Medium

February 26, 2026 Patched in ["1.7.1053"] CVE-2026-28135

Royal Elementor Addons and Templates <= 1.7.1036 - Missing Authorization to Unauthenticated Media File Upload Medium

November 24, 2025 Patched in ["1.7.1037"] CVE-2025-11363

Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library Medium

November 19, 2025 Patched in ["1.7.1032"] CVE-2025-5092

Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

November 18, 2025 Patched in ["1.7.1037"] CVE-2025-6251

Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets Medium

June 25, 2025 Patched in ["1.7.1029"] CVE-2025-5338

Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 30, 2025 Patched in ["1.7.1021"] CVE-2025-3813

Royal Elementor Addons <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 7, 2025 Patched in ["1.7.1018"] CVE-2025-39361

Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 6, 2025 Patched in ["1.7.1018"] CVE-2024-12120

Royal Elementor Addons <= 1.3.977 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

April 16, 2025 Patched in ["1.3.979"] CVE-2025-39543

Royal Elementor Addons <= 1.7.1006 - Authenticated (Admin+) Server Side Request Forgery Medium

April 11, 2025 Patched in ["1.7.1007"] CVE-2025-26990

Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

April 11, 2025 Patched in ["1.7.1013"] CVE-2025-1455

Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting Medium

April 11, 2025 Patched in ["1.7.1013"] CVE-2025-1456

Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting Medium

February 18, 2025 Patched in ["1.7.1008"] CVE-2025-1441

Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting Medium

January 13, 2025 Patched in ["1.7.1007"] CVE-2025-0393

Royal Elementor Addons <= 1.7.1001 - Reflected Cross-Site Scripting Medium

December 19, 2024 Patched in ["1.7.1002"] CVE-2024-56226

Royal Elementor Addons <= 1.7.1001 - Missing Authorization Medium

December 19, 2024 Patched in ["1.7.1002"] CVE-2024-56227

Royal Elementor Addons <= 1.3.987 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

December 18, 2024 Patched in ["1.7.1"] CVE-2024-56062

Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure Medium

November 27, 2024 Patched in ["1.7.1004"] CVE-2024-10798

Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget Medium

November 12, 2024 Patched in ["1.7.1002"] CVE-2024-9059

Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Medium

November 12, 2024 Patched in ["1.7.1002"] CVE-2024-9668

Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget Medium

November 12, 2024 Patched in ["1.7.1002"] CVE-2024-9682

Royal Elementor Addons <= 1.3.980 - Authenticated (Author+) External Entity Injection Medium

October 24, 2024 Patched in ["1.3.981"] CVE-2024-50442

Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure Medium

October 16, 2024 Patched in ["1.3.987"] CVE-2024-7417

Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget Medium

October 7, 2024 Patched in ["1.3.987"] CVE-2024-8482

Royal Elementor Addons <= 1.3.982 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 29, 2024 Patched in ["1.3.985"] CVE-2024-44001

Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget Medium

July 23, 2024 Patched in ["1.3.981"] CVE-2024-5818

Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads Medium

June 6, 2024 Patched in ["1.3.977"] CVE-2024-4489

Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

June 6, 2024 Patched in ["1.3.977"] CVE-2024-4488

Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget Medium

May 31, 2024 Patched in ["1.3.976"] CVE-2024-4087

Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 31, 2024 Patched in ["1.3.976"] CVE-2024-4342

Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget Medium

May 15, 2024 Patched in ["1.3.975"] CVE-2024-3887

Royal Elementor Addons <= 1.3.93 - Unauthenticated IP Spoofing Medium

April 22, 2024 Patched in ["1.3.95"] CVE-2024-32786

Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes Medium

April 22, 2024 Patched in ["1.3.972"] CVE-2024-3675

Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags Medium

April 22, 2024 Patched in ["1.3.972"] CVE-2024-2799

Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Medium

April 22, 2024 Patched in ["1.3.972"] CVE-2024-2798

Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags Medium

April 22, 2024 Patched in ["1.3.972"] CVE-2024-3889

Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload High

April 19, 2024 Patched in ["1.3.95"] CVE-2024-1567

Royal Elementor Addons <= 1.3.93 - Authenticated (Contributor+) Stored Cross-Site Scriting Medium

April 5, 2024 Patched in ["1.3.95"] CVE-2024-31236

Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget Medium

March 6, 2024 Patched in ["1.3.92"] CVE-2024-1500

Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

February 8, 2024 Patched in ["1.3.88"] CVE-2024-0442

Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist Medium

February 7, 2024 Patched in ["1.3.88"] CVE-2024-0513

Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare Medium

February 7, 2024 Patched in ["1.3.88"] CVE-2024-0515

Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare Medium

February 7, 2024 Patched in ["1.3.88"] CVE-2024-0514

Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist Medium

February 7, 2024 Patched in ["1.3.88"] CVE-2024-0512

Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta Medium

February 7, 2024 Patched in ["1.3.88"] CVE-2024-0516

Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta Medium

February 7, 2024 Patched in ["1.3.88"] CVE-2024-0511

Royal Elementor Addons and Templates <= 1.3.80 - Missing Authorization to Private/Password Protected Post Read Medium

December 6, 2023 Patched in ["1.3.81"] CVE-2023-5922

Royal Elementor Addons and Templates <= 1.3.78 - Unauthenticated Arbitrary File Upload Critical

October 9, 2023 Patched in ["1.3.79"] CVE-2023-5360

Royal Elementor Addons <= 1.3.75 - Cross-Site Request Forgery Medium

August 22, 2023 Patched in ["1.3.76"] CVE-2022-47175

Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Medium

July 18, 2023 Patched in ["1.3.71"] CVE-2023-33999

Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure Medium

July 17, 2023 Patched in ["1.3.71"] CVE-2023-3709

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation Medium

January 10, 2023 Patched in ["1.3.60"] CVE-2022-4705

Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation Medium

January 10, 2023 Patched in ["1.3.60"] CVE-2022-4707

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation Medium

January 10, 2023 Patched in ["1.3.60"] CVE-2022-4701

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion Medium

January 10, 2023 Patched in ["1.3.60"] CVE-2022-4703

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import Medium

January 10, 2023 Patched in ["1.3.60"] CVE-2022-4704

Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting Medium

January 10, 2023 Patched in ["1.3.60"] CVE-2022-4710

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification Medium

January 10, 2023 Patched in ["1.3.60"] CVE-2022-4708

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update Medium

January 10, 2023 Patched in ["1.3.60"] CVE-2022-4711

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation Medium

January 10, 2023 Patched in ["1.3.60"] CVE-2022-4702

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation Medium

January 10, 2023 Patched in ["1.3.60"] CVE-2022-4700

Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import Medium

January 10, 2023 Patched in ["1.3.60"] CVE-2022-4709

Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery High

December 15, 2022 Patched in ["1.3.56"] CVE-2022-4102

Royal Elementor Addons <=1.3.55 - Authenticated (Subscriber+) Arbitrary Post Deletion High

December 15, 2022 Patched in ["1.3.56"] CVE-2022-4102

Royal Elementor Addons <=1.3.55 - Missing Authorization to Subscriber+ Arbitrary Post Creation Medium

December 15, 2022 Patched in ["1.3.56"] CVE-2022-4103

Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery High

December 6, 2022 Patched in ["1.3.56"]

Freemius SDK <= 2.4.2 - Missing Authorization Checks Medium

March 4, 2022 Patched in ["1.3.33"] CVE-2022-4974

What It Does

Royal Addons for Elementor is a bundle of Elementor widgets and templates that adds features such as a header and footer builder, post and WooCommerce grids, sliders, forms, galleries, and nav menu widgets. In practice, it lets you build complete page layouts, product listings, and site chrome without writing code or installing many separate plugins. It is positioned as an all-in-one add-on kit for users already working inside Elementor.

Who It's For

This plugin fits small business owners, freelance designers, and WooCommerce store builders who already use Elementor and want a single toolkit for headers, product grids, sliders, and templates. It is most useful on sites where the owner is comfortable assembling pages from prebuilt blocks rather than building custom widgets from scratch.

Who Should Skip It

If you do not use Elementor, this plugin does nothing for you, and if you only need one feature like a header builder or a slider, a focused single-purpose plugin will be lighter on your dashboard. Sites with strict performance budgets may also want to skip a multi-widget bundle and instead add only the specific Elementor addons they need.

The Bottom Line

Royal Addons for Elementor delivers a strong, well-maintained bundle of widgets and templates that should satisfy most Elementor-based sites, with a 95.28/100 quality score and a perfect support record. It is not the most installed option in its category, so users who prioritize community size alone may prefer Essential Addons or Ultimate Addons. Overall, it is a safe, dependable choice for Elementor users who want many features in a single plugin.

Related Plugins

Essential Addons for Elementor 97/100

Pick this if you want the largest community and the widest template library, given its 2 million installs and slightly higher overall score.

Ultimate Addons for Elementor 96/100

Choose this if header and footer building is your main need and you want a more established 2 million install user base.

Elementor Website Builder 95/100

Use this if you do not yet have Elementor at all, since Royal Addons is meaningless without the parent page builder installed.

ElementsKit Elementor Addons 94/100

Pick ElementsKit if you want a comparable mega-bundle with over 1 million installs and a similarly broad feature set.

Starter Templates 89/100

Choose Starter Templates when you need full prebuilt site demos to import quickly rather than piecing together individual widgets.