Unlimited Elements For Elementor

86 Quality Score

Active Installs

25/30

With 300,000 active installs, it sits well below the top Elementor addons (Essential Addons and Ultimate Addons both exceed 2 million) but still holds a solid mid-tier user base.

Update Freshness

25/25

A last update of July 2026 and tested up to WordPress 7.0 shows the developer is actively keeping the plugin current with the latest core releases.

User Rating

14/15

A 96 out of 100 from 519 users is an excellent average score, indicating most installers are happy with the results.

Support Health

8/15

Only 2 of 6 support threads (33.3%) are resolved, which is a weak support signal and a real concern if you rely on timely help.

WP Compatibility

15/15

Compatibility scores maxed out at 100, reflecting modern PHP 7.4+ and WordPress requirements that match today's hosting environment.

Scores higher than 97% of indexed plugins

About

Elementor all-in-one addons pack with the best widgets for Elementor, offering 100+ free widgets, templates, and tools to create stunning websites!

Active Installs 300k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-16 1:08pm GMT

Requires WordPress 3.5+

Tested Up To 7.1.1

Requires PHP 7.4+

Security History

46 known vulnerabilities, all patched

2 Critical 16 High 28 Medium

Most recent: September 18, 2026

View details ▸

Unlimited Elements For Elementor <= 2.0.19 - Authenticated (Subscriber+) PHP Object Injection High

September 18, 2026 Patched in ["2.0.20"] CVE-2026-85017

Unlimited Elements For Elementor <= 2.0.19 - Authenticated (Contributor+) Server-Side Request Forgery Medium

September 17, 2026 Patched in ["2.0.20"] CVE-2026-66608

Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting Medium

September 10, 2026 Patched in ["2.0.17"] CVE-2026-77150

Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection High

September 10, 2026 Patched in ["2.0.17"] CVE-2026-18561

Unlimited Elements For Elementor <= 2.0.17 - Unauthenticated Stored Cross-Site Scripting High

September 7, 2026 Patched in ["2.0.18"] CVE-2026-84820

Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter Medium

September 4, 2026 Patched in ["2.0.18"] CVE-2026-75586

Unlimited Elements For Elementor <= 2.0.17 - Missing Authorization Medium

September 3, 2026 Patched in ["2.0.18"] CVE-2026-85304

Unlimited Elements For Elementor <= 2.0.15 - Missing Authorization Medium

August 3, 2026 Patched in ["2.0.16"] CVE-2026-28147

Unlimited Elements For Elementor <= 2.0.14 - Authenticated (Contributor+) Arbitrary File Download Medium

August 3, 2026 Patched in ["2.0.15"] CVE-2026-28146

Unlimited Elements For Elementor <= 2.0.12 - Unauthenticated Stored Cross-Site Scripting High

July 9, 2026 Patched in ["2.0.13"] CVE-2026-57718

Unlimited Elements for Elementor <= 2.0.10 - Unauthenticated Stored Cross-Site Scripting High

June 29, 2026 Patched in ["2.0.11"] CVE-2026-10081

Unlimited Elements For Elementor <= 2.0.8 - Authenticated (Contributor+) SQL Injection Medium

May 26, 2026 Patched in ["2.0.9"] CVE-2026-48837

Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter Medium

May 13, 2026 Patched in ["2.0.8"] CVE-2026-5486

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter Medium

April 30, 2026 Patched in ["1.5.141"] CVE-2024-13362

Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal High

April 16, 2026 Patched in ["2.0.7"] CVE-2026-4659

Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields High

March 9, 2026 Patched in ["2.0.6"] CVE-2026-2724

Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget Medium

February 2, 2026 Patched in ["2.0.2"] CVE-2025-14274

Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload High

November 26, 2025 Patched in ["2.0.1"] CVE-2025-13692

Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 27, 2025 Patched in ["1.5.149"] CVE-2025-8603

Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

April 2, 2025 Patched in ["1.5.143"] CVE-2025-1663

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget Medium

February 19, 2025 Patched in ["1.5.141"] CVE-2024-13155

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Medium

January 8, 2025 Patched in ["1.5.136"] CVE-2024-13153

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

December 11, 2024 Patched in ["1.5.127"] CVE-2024-10784

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.121 - Authenticated (Editor+) Remote Code Execution High

October 14, 2024 Patched in ["1.5.122"] CVE-2024-49271

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.121 - Reflected Cross-Site Scripting Medium

September 30, 2024 Patched in ["1.5.122"] CVE-2024-45454

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass Medium

July 8, 2024 Patched in ["1.5.113"] CVE-2024-6171

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection High

July 8, 2024 Patched in ["1.5.113"] CVE-2024-6166

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email' Medium

July 8, 2024 Patched in ["1.5.113"] CVE-2024-6170

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username' Medium

July 8, 2024 Patched in ["1.5.113"] CVE-2024-6169

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter High

June 5, 2024 Patched in ["1.5.110"] CVE-2024-5329

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Information Exposure Medium

June 5, 2024 Patched in ["1.5.110"] CVE-2024-35674

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field Medium

May 29, 2024 Patched in ["1.5.108"] CVE-2024-3190

Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import High

May 28, 2024 Patched in ["1.5.91"] CVE-2023-6743

Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0] High

May 22, 2024 Patched in ["1.5.108"] CVE-2024-4779

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection High

May 10, 2024 Patched in ["1.5.105"] CVE-2024-3055

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection High

May 9, 2024 Patched in ["1.5.103"] CVE-2024-2662

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting Medium

May 9, 2024 Patched in ["1.5.103"] CVE-2024-3547

Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link Medium

March 29, 2024 Patched in ["1.5.97"] CVE-2024-0367

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.93 - Reflected Cross-Site Scripting Medium

March 25, 2024 Patched in ["1.5.94"] CVE-2024-29792

Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Medium

July 18, 2023 Patched in ["1.5.75"] CVE-2023-33999

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.65 - Missing Authorization Medium

June 20, 2023 Patched in ["1.5.66"] CVE-2023-31080

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload High

June 16, 2023 Patched in ["1.5.67"] CVE-2023-3295

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.60 - Arbitrary File Upload in File Manager Critical

May 22, 2023 Patched in ["1.5.61"] CVE-2023-31090

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Zip Extraction to Arbitrary File Upload in File Manager Critical

May 22, 2023 Patched in ["1.5.67"] CVE-2023-33930

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.48 - Authenticated (Admin+) Cross Site Scripting (XSS) Medium

January 27, 2023 Patched in ["1.5.49"] CVE-2022-47170

Freemius SDK <= 2.4.2 - Missing Authorization Checks Medium

March 4, 2022 Patched in ["1.5.3"] CVE-2022-4974

What It Does

Unlimited Elements For Elementor is an all-in-one addons pack that bundles 100+ free Elementor widgets, templates, and design tools into a single plugin. It expands the default Elementor editor with extra blocks for things like post grids, carousels, icon boxes, and marketing content, plus pre-built page templates. In practice, it lets Elementor users skip installing multiple smaller addons and get most of the extras they need in one download.

Who It's For

This is best for Elementor users who want a broad library of widgets without stacking five or six separate addon plugins on their site. Solo site owners, small agencies, and bloggers building landing pages, portfolio sites, or marketing pages will get good value from the 100+ free widgets. It is less of a fit for developers who prefer minimal setups or hand-coded CSS.

Who Should Skip It

If you only need one or two specific widgets (like a slider or pricing table), a dedicated single-purpose plugin or Elementor Pro will be cleaner and lighter than this full bundle. Large enterprise sites with strict performance budgets should also avoid it, since packing 100+ widgets into one install can add weight regardless of which ones you actually use.

The Bottom Line

Unlimited Elements For Elementor delivers strong ratings and top-tier maintenance, making it a trustworthy pick for Elementor users who want variety without installing multiple plugins. The weak support resolution rate (33.3%) is the main caveat, so do not expect fast help if something breaks. For most Elementor users who just want more widgets, the 86.43 overall score makes it a solid mid-tier choice below Essential Addons and Ultimate Addons.

Related Plugins

Essential Addons for Elementor 97/100

Pick this if you want a larger user community (2 million installs) and a deeper template library for content-heavy Elementor sites.

Ultimate Addons for Elementor

Choose this if header, footer, and layout building are your main need, since it shares the same install scale at 2 million active users.

Elementor Website Builder 95/100

Choose Elementor Pro itself if you want the most reliable, first-party widgets and willing to pay for tighter integration.

Royal Addons for Elementor 95/100

Pick Royal Addons if you want a comparable 100+ widget bundle with double the install count at 600,000 active sites.

ElementsKit Elementor Addons 94/100

Choose ElementsKit if you want a similar mega-addon bundle with 1 million installs and a more established support track record.