The Plus Addons for Elementor – Mega Menu, Header Footer, Post Grid, AI Widgets & Templates

84 Quality Score

Active Installs

23/30

With 100,000 active installs it has a real user base, though it is well behind leading alternatives such as Essential Addons and ElementsKit which each sit at 1 to 2 million installs.

Update Freshness

25/25

Last updated on 2026-06-27 and explicitly tested with WordPress 7.0, so maintenance signals are strong and the plugin is clearly being kept current.

User Rating

14/15

A 92 out of 100 average from 386 reviewers is a solid score and suggests users are broadly satisfied with features and stability.

Support Health

8/15

Only 2 support threads are visible with a 50 percent resolution rate, which is too small a sample to draw strong conclusions and indicates either low support volume or limited public thread activity.

WP Compatibility

15/15

Requires PHP 7.4 and WordPress 6.0, which is a reasonable modern baseline, and compatibility testing through WordPress 7.0 reflects forward-looking support.

Scores higher than 93% of indexed plugins

About

120+ Elementor widgets, AI tools, Mega Menu, WooCommerce, Header Footer & Popup Builder, Blog Builder & 1000+ templates. Connect any MCP AI agent.

Active Installs 100k+

Rating ★★★★½ 4.6/5

Last Updated 2026-09-24 6:31am GMT

Requires WordPress 6.0+

Tested Up To 7.1.2

Requires PHP 7.4+

Security History

41 known vulnerabilities, all patched

1 High 40 Medium

Most recent: May 28, 2026

View details ▸

The Plus Addons for Elementor <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'carousel_direction' Parameter Medium

May 28, 2026 Patched in ["6.4.16"] CVE-2026-9243

The Plus Addons for Elementor <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes Medium

May 21, 2026 Patched in ["6.4.12"] CVE-2026-15285

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 21, 2026 Patched in ["6.4.12"]

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 21, 2026 Patched in ["6.4.12"]

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Lite Widget Medium

May 13, 2026 Patched in ["6.4.12"] CVE-2026-5243

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar Medium

April 7, 2026 Patched in ["6.4.10"] CVE-2026-3311

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay Medium

February 21, 2026 Patched in ["6.4.8"] CVE-2026-2385

The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Author+) Arbitrary Draft Post Creation via 'post_type' Medium

February 18, 2026 Patched in ["6.4.8"] CVE-2026-2386

The Plus Addons for Elementor <= 6.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Medium

September 22, 2025 Patched in ["6.3.16"] CVE-2025-9698

The Plus Addons for Elementor Page Builder Lite <= 6.3.13 - Missing Authorization Medium

August 14, 2025 Patched in ["6.3.14"] CVE-2025-55712

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

July 31, 2025 Patched in ["6.3.11"] CVE-2025-7646

The Plus Addons for Elementor Page Builder Lite <= 6.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 30, 2025 Patched in ["6.2.8"] CVE-2025-49076

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Medium

March 7, 2025 Patched in ["6.2.3"] CVE-2025-1287

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

January 31, 2025 Patched in ["6.2.0"] CVE-2024-11829

The Plus Addons for Elementor Page Builder Lite <= 5.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

December 2, 2024 Patched in ["6.0.1"] CVE-2024-53823

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates Medium

November 19, 2024 Patched in ["6.0.4"] CVE-2024-10365

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template Medium

October 10, 2024 Patched in ["5.6.12"] CVE-2024-8913

The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Authenticated (Author+) Stored Cross-Site Scripting Medium

August 28, 2024 Patched in ["5.6.3"] CVE-2024-43977

The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Missing Authorization Medium

August 26, 2024 Patched in ["5.6.3"] CVE-2024-43932

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings Medium

August 21, 2024 Patched in ["5.6.3"] CVE-2024-5583

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget Medium

August 19, 2024 Patched in ["5.6.3"] CVE-2024-5763

The Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget Medium

August 19, 2024 Patched in ["5.6.3"] CVE-2024-6575

The Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Medium

July 2, 2024 Patched in ["5.6.2"] CVE-2024-4482

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting Medium

June 26, 2024 Patched in ["5.6.1"] CVE-2024-4983

The Plus Addons for Elementor Page Builder Lite <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

June 6, 2024 Patched in ["5.5.5"] CVE-2024-35709

The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box Medium

May 23, 2024 Patched in ["5.5.5"] CVE-2024-3718

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 23, 2024 Patched in ["5.5.3"] CVE-2024-4485

The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card Medium

May 23, 2024 Patched in ["5.5.5"] CVE-2024-2784

The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 23, 2024 Patched in ["5.5.3"] CVE-2024-4484

The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 6, 2024 Patched in ["5.5.0"] CVE-2024-0445

The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate Medium

May 6, 2024 Patched in ["5.5.0"] CVE-2024-2785

The Plus Addons for Elementor Page Builder Lite <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 3, 2024 Patched in ["5.5.0"] CVE-2024-34373

The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Medium

April 25, 2024 Patched in ["5.5.0"] CVE-2024-3199

The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes Medium

April 25, 2024 Patched in ["5.5.0"] CVE-2024-3197

The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing Medium

March 26, 2024 Patched in ["5.4.2"] CVE-2024-2210

The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget Medium

March 26, 2024 Patched in ["5.4.2"] CVE-2024-2203

The Plus Addons for Elementor <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Header Meta Content Widget Medium

March 6, 2024 Patched in ["5.4.1"] CVE-2024-1419

The Plus Addons for Elementor <= 5.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

January 30, 2024 Patched in ["5.3.4"] CVE-2024-23511

The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalation High

April 14, 2021 Patched in ["2.0.7"] CVE-2021-4331

The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read Medium

April 14, 2021 Patched in ["2.0.7","4.1.10"] CVE-2021-4332

The Plus Addons for Elementor Page Builder Lite < 2.0.6 - Authenticated Stored Cross-Site Scripting Medium

April 13, 2021 Patched in ["2.0.6"] CVE-2021-24266

What It Does

The Plus Addons for Elementor bundles more than 120 widgets and over 1,000 templates into the Elementor page builder, covering common needs such as mega menus, post grids, custom header and footer builders, and WooCommerce widgets. It is designed to be a one-stop extension pack so site owners can build advanced layouts without installing a dozen separate add-on plugins. The free tier covers many widgets, while a Pro upgrade unlocks the full library of templates and advanced features.

Who It's For

This plugin is a strong fit for digital agencies and freelancers who build many Elementor-based client sites and want a single, broad toolkit rather than mixing multiple smaller add-on plugins. It also works well for small businesses and e-commerce stores that need mega menus, custom headers, product grids, and other WooCommerce-friendly widgets without writing code. Content creators selling products or services will also benefit from the ready-made templates.

Who Should Skip It

If you only need one or two specific widgets, such as a basic post grid or a simple header builder, installing a lighter single-purpose plugin will be faster and lighter on your site. Sites that do not already use Elementor should not consider this plugin, since every feature depends on Elementor being installed and active.

The Bottom Line

The Plus Addons for Elementor scores a solid 83.69 out of 100 and delivers a genuinely wide feature set covering widgets, templates, mega menus, and WooCommerce. Its strongest signals are recent updates, broad compatibility, and good ratings, while the weakest signal is a thin public support thread sample. It is worth considering for agencies and Elementor-heavy sites, though larger alternatives such as Essential Addons and ElementsKit may offer more community proof.

Related Plugins

Essential Addons for Elementor 97/100

Pick Essential Addons when you want a more popular community-trusted add-on pack with 2 million installs and a similarly large widget library.

Ultimate Addons for Elementor 96/100

Pick Ultimate Addons if your priority is polished header and footer building, since that is its core specialty and it also has 2 million installs.

Elementor Website Builder 95/100

Pick standalone Elementor if you only need core page-building features and want to avoid add-on plugins altogether.

Royal Addons for Elementor 95/100

Pick Royal Addons if you want a competitively scored add-on pack with 600,000 installs that is closer in niche focus to The Plus Addons.

ElementsKit Elementor Addons 94/100

Pick ElementsKit if you want a higher overall quality score and a million-plus install base for a comparable all-in-one Elementor toolkit.