Skip to content
PluginCanary

DethemeKit for Elementor

by Detheme · 30,000+ active installs · Checked 3 Nov 2026
Avoid2 Criticals2 Warnings

Avoid: vulnerability published 22 Sep 2025 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for DethemeKit for Elementor
Ownership100
Maintenance20
Security10
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 22 Sep 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.6 Oct 2025Evidence
  • CriticalSEC-2Vulnerability published 4 Apr 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.18 Apr 2025Evidence
  • WarningMNT-2Tested up to WordPress 6.7.11, 4 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • WarningMNT-1No release in 20 months (last release 13 Mar 2025). Plan a replacement if the plugin is important to your site.13 Mar 2026Evidence
  • InfoSEC-36 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master11 Aug 2020 to 11 Aug 2020, 1 commits
detheme13 Aug 2020 to 13 Mar 2025, 63 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
20 months ago
Releases, 24 months
1
Tested up to
6.7 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for DethemeKit for Elementor
Q1 20241
Q2 20240
Q3 20241
Q4 20240
Q1 20251
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 13 Mar 2025. Tested up to 6.7, 4 major versions behind WordPress 7.1.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
22 Sep 2025DethemeKit For Elementor <= 2.1.10 - Missing Authorization5.4<= 2.1.10No fixn/a
4 Apr 2025DethemeKit For Elementor <= 2.1.10 - Missing Authorization5.3<= 2.1.10No fixn/a
13 Mar 2025DethemeKit for Elementor <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.92.1.10n/a
14 Feb 2025DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.82.1.9n/a
12 Feb 2025DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via De Gallery Widget6.4<= 2.1.82.1.9n/a
12 Feb 2025DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Protected Post Disclosure4.3<= 2.1.82.1.9n/a
30 Sep 2024DethemeKit For Elementor <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.72.1.80
26 Jun 2024DethemeKit For Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Parameter of the De Gallery Widget5.4<= 2.1.52.1.6n/a
30 May 2024DethemeKit For Elementor <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via slitems Attribute6.4<= 2.1.42.1.5n/a
17 May 2024DethemeKit For Elementor <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4<= 2.1.32.1.4n/a
14 May 2024DethemeKit For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.22.1.3n/a
15 Apr 2024DethemeKit For Elementor <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.0.22.1.00
13 Apr 2021DethemeKit For Elementor <= 1.5.5.4 - Authenticated Stored Cross-Site Scripting5.4< 1.5.5.51.5.5.50

Source: Wordfence Intelligence.

Reputation

Lifetime rating 3.7 from 9 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star6
4 star0
3 star0
2 star0
1 star3
Latest low reviews

Momentum

30,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for DethemeKit for Elementor
4 May 2026183
11 May 2026552
18 May 2026428
25 May 2026332
1 Jun 2026346
8 Jun 2026334
15 Jun 2026307
22 Jun 2026291
29 Jun 2026314
6 Jul 2026297
13 Jul 2026277
20 Jul 2026294
27 Jul 2026355
3 Aug 2026359
10 Aug 2026318
17 Aug 2026325
24 Aug 2026301
31 Aug 2026334
7 Sep 2026309
14 Sep 2026381
21 Sep 2026362
28 Sep 2026340
5 Oct 2026365
12 Oct 2026350
19 Oct 2026424
26 Oct 2026656
2 Nov 2026102

Weekly downloads over the last 4 weeks are 12% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline)Score 93 · 70,000+Xpro Theme Builder For Elementor - FREEScore 93 · 20,000+Ultimate Addons for Beaver Builder (UABB)Score 93 · 20,000+Header Footer Builder for ElementorScore 92 · 30,000+Conditional Fields for Elementor Form - Apply Conditional LogicScore 92 · 10,000+

Facts

Version2.1.10
AuthorDetheme
Added13 Aug 2020
Last updated13 Mar 2025
Active installs30,000+
Requires WordPress5.2
Tested up to6.7.11
Requires PHPnot stated
CategoryDesign & Themes > Page Builders & Visual Editors
Tagsdetheme, elementor, dethemekit

Other plugins by this author: Vast Demo Import, Vast Package

Questions

Is DethemeKit for Elementor still maintained?

DethemeKit for Elementor was last updated on 13 Mar 2025. Its Canary status is Avoid.

Is DethemeKit for Elementor safe?

DethemeKit for Elementor has 2 published vulnerabilities with no patched version. Its Canary status is Avoid.

Who owns DethemeKit for Elementor?

The wordpress.org author is Detheme. Recent committers: detheme, plugin-master. We have recorded no ownership change.

What can I use instead of DethemeKit for Elementor?

Plugins in the same category with a higher Canary Score: Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline), Xpro Theme Builder For Elementor - FREE, Ultimate Addons for Beaver Builder (UABB), Header Footer Builder for Elementor, Conditional Fields for Elementor Form - Apply Conditional Logic.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue