Elements Plus!

Elements Plus! has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).

Every one of the 3 issues recorded for Elements Plus! has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Elements Plus! is installed on roughly 6,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Elements Plus! vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-8689

Elements Plus! <= 2.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

Read the full analysis

Vulnerability Records

3 records
Elements Plus! banner
Latestv2.16.5
4.8(23)
96/100
Last Updated
2025-09-15 (1y ago)
Active Installs
6,000+
Downloads
330,782
Requires WP
6.1+
Requires PHP
5.4+
Tested up to
WP 6.8.8
Created
2017-08-28 (9y ago)

Elements Plus! is a plugin for the popular Elementor page builder. It gives the user thirty one extra &#8216;elements’ (widgets) to use. Check out the demo now! The plugin’s documentation can be found here. Custom Elements AudioIgniter Plus: An element that allows you to embed AudioIgniter playlists. Button Plus: This is a custom button widget with two lines of text. Caldera Forms Plus: Embed and style Caldera forms using Elementor. Call to Action Plus: A CTA widget with two lines of text and a button. Contact Form 7 Plus: Embed and style Contact Form 7 forms using Elementor. Content Toggle Plus: Create interactive content with ease. Countdown Plus: A simple but versatile countdown widget. Dual Button Plus: Displays two buttons with separate options for each one. FlipClock Plus: A versatile flipclock timer to add to your projects. Gallery Plus: Gallery widget using the popular JustifiedGallery jQuery library to help you create beautiful justified galleries. Google Maps Plus: Maps widget which allows you to use a curated list of custom styles from snazzymaps. Heading Plus: Create flexible headings with different colors & typography per word. Hotspots Plus: Add hotspots with optional tooltips on any image. Icon Plus: An icon element similar to the one bundled with Elementor, with custom icon sets. Image Accordion Plus: Easily create responsive image accordions. Image Comparison Plus: An element which allows you to highlight the differences between two images. Image Hover Effects Plus: An element which allows you to switch between two images on hover with beautiful effects. Inline SVG Plus: Use SVGs with Elementor. Instagram Filters Plus: Allows you to apply various filters to Elementor’s default Image widget. Label Plus: Use the label widget to add a label above any element. Preloader Plus: Use this simple element to show a loading animation while your page loads. Pricing List Plus: Create flexible pricing lists for menus, service pricing and more. Scheduled Plus: Add-on properties to control any element’s visibility based on date. Search Plus: AJAX Powered search box. Sticky Videos Plus: Add sticky video functionality to the default Elementor video widget. Tables Plus: Create awesome tables in no time. Tilt Effect Plus: Add tilt effect to any element or widget. Tooltip: Enable this option to add a tooltip to the Heading, Button, Icon, and Icon Box default Elementor widgets. WPForms Plus: Use and style your WPForms with Elementor. YouTube Slideshow: Create a slideshow using your favorite YouTube videos. Notice The plugin requires the Elementor page builder to be active in order to work.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C