MAS Elementor

MAS Elementor has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for MAS Elementor has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. MAS Elementor is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all MAS Elementor vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-12328

MAS Elementor <= 1.1.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG

Read the full analysis

Vulnerability Records

2 records


2025-01-07 00:00	MAS Elementor <= 1.1.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG MAS Elementor <= 1.1.7	`CVE-2024-12328`	6.4 Medium	Ryan Zegar	Yes
2024-10-14 00:00	MAS Elementor <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting MAS Elementor <= 1.1.6	`CVE-2024-49233`	6.4 Medium	Khalid Yusuf	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv1.2.3

MAS Elementor

Author

MadrasThemes

0.0(0)

0/100

Last Updated

2026-03-17 (6mo ago)

Active Installs

900+

Downloads

18,905

Requires WP

6.8+

Requires PHP

7.4+

Tested up to

WP 6.9.7

Created

2022-11-29 (4y ago)

MAS Elementor is a free plugin. Added new widgets and controls for existing elementor widgets. Documentation All of our online documentation can be found on our documentation site.

View on WordPress.org