Skip to content
PluginCanary

Elementor Website Builder - more than just a page builder

by Elementor · 10,000,000+ active installs · Checked 3 Nov 2026
Watch4 Warnings

Watch: vulnerability published 19 Oct 2026, fixed in 4.3.5.

79/ 100 Canary Score
Sub-scores for Elementor Website Builder - more than just a page builder
Ownership100
Maintenance100
Security60
Support67
Reputation60

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 4.3.5. Update to version 4.3.5 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 4.3.5. Update to version 4.3.5 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 14 Oct 2026, fixed in 4.2.4. Update to version 4.2.4 or later.14 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 25 Sep 2026, fixed in 4.3.2. Update to version 4.3.2 or later.25 Sep 2026Evidence
  • InfoSEC-322 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
KingYes6 Dec 2016 to 2 Nov 2026, 1997 commits
elemntor1 Sep 2026 to 2 Nov 2026, 3 commits

New committer elemntor made a first commit on 1 Sep 2026.

Maintenance

Last release
yesterday
Releases, 24 months
185
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Elementor Website Builder - more than just a page builder
Q1 202429
Q2 202436
Q3 2024536
Q4 202436
Q1 202523
Q2 202519
Q3 202525
Q4 202523
Q1 202631
Q2 202623
Q3 202615
Q4 20265

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Support

67% of 69 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
19 Oct 2026Elementor <= 4.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.3.44.3.50
19 Oct 2026Elementor <= 4.3.4 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 4.3.44.3.50
14 Oct 2026Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameters4.3<= 4.2.34.2.40
25 Sep 2026Elementor Website Builder 4.3.0 - 4.3.1 - Cross-Site Request Forgery via REST Nonce Bypass to Privilege Escalation8.84.3.0 to 4.3.14.3.20
29 Jun 2026Elementor <= 4.1.3 - Authenticated (Contributor+) Sensitive Information Exposure4.3<= 4.1.34.1.40
25 Jun 2026Elementor Website Builder – more than just a page builder <= 4.1.3 - Authenticated (Contributor+) Sensitive Information Exposure4.3<= 4.1.34.1.40
2 Jun 2026Elementor Website Builder – more than just a page builder <= 4.1.0 - Missing Authorization4.3<= 4.1.04.1.10
30 Apr 2026Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API6.4<= 4.0.44.0.50
7 Apr 2026Elementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API6.4<= 3.35.53.35.60
25 Mar 2026Elementor Website Builder <= 3.35.7 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template4.3<= 3.35.73.35.80
7 Mar 2026Elementor Website Builder <= 3.35.5 - Missing Authorization4.3<= 3.35.53.35.60
13 Feb 2026Elementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.35.53.35.619
15 Dec 2025Elementor <= 3.33.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Text Path6.4<= 3.33.33.33.40
25 Nov 2025Elementor Website Builder <= 3.33.0 - Missing Authorization4.3<= 3.33.03.33.10
11 Aug 2025Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import4.9<= 3.30.23.30.30
28 Jul 2025Elementor <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.29.03.29.10
28 Jul 2025Elementor <= 3.30.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Path Widget6.4<= 3.30.23.30.30
19 Jun 2025Elementor Website Builder <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.29.03.29.10
24 Feb 2025Elementor Website Builder <= 3.25.10 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.25.103.25.110
19 Feb 2025Elementor Website Builder – More Than Just a Page Builder <= 3.27.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.27.43.27.50
20 Dec 2024Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings6.4<= 3.25.93.25.100
25 Nov 2024Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.25.73.25.80
14 Oct 2024Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function4.3<= 3.24.53.24.60
10 Sep 2024Elementor Website Builder – More than Just a Page Builder <= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets5.4<= 3.23.43.24.00
28 Jun 2024Elementor Website Builder <= 3.22.1 - Authenticated (Contributor+) Arbitrary SVG Download6.4<= 3.22.13.22.20

Source: Wordfence Intelligence.

Reputation

Average rating fell from 3.6 to 2.9 between Q3 2026 and Q4 2026.

Rating distribution
5 star6157
4 star233
3 star121
2 star121
1 star690
Latest low reviews

Momentum

10,000,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Elementor Website Builder - more than just a page builder
4 May 20261,211,908
11 May 20264,161,831
18 May 20264,371,648
25 May 20266,754,081
1 Jun 2026951,666
8 Jun 20266,791,695
15 Jun 2026929,617
22 Jun 20263,782,566
29 Jun 2026807,520
6 Jul 20261,101,864
13 Jul 20264,170,739
20 Jul 20263,859,403
27 Jul 20263,836,757
3 Aug 20264,301,366
10 Aug 2026921,998
17 Aug 20264,309,617
24 Aug 2026857,275
31 Aug 20263,890,102
7 Sep 2026752,072
14 Sep 2026980,655
21 Sep 202610,094,043
28 Sep 20263,729,081
5 Oct 20264,224,350
12 Oct 20263,640,623
19 Oct 2026997,267
26 Oct 20261,183,493
2 Nov 2026150,778

Weekly downloads over the last 4 weeks are 51% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Fusion Page BuilderScore 87 · 3,000+SKT Page BuilderScore 87 · 2,000+Landing Page Builder - Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing PagesScore 86 · 8,000+Beaver Builder Page Builder - Drag and Drop Website BuilderScore 83 · 100,000+Colibri Page BuilderScore 83 · 80,000+

Facts

Version4.3.6
AuthorElementor
Added30 May 2016
Last updated2 Nov 2026
Active installs10,000,000+
Requires WordPress6.8
Tested up to7.1.4
Requires PHP7.4
CategoryDesign & Themes > Page Builders & Visual Editors
TagsAI, mcp, editor, landing page, drag-and-drop

Other plugins by this author: Image Optimizer - Compress Images and Convert to WebP or AVIF, Web Accessibility (formally known as Ally) - WCAG Scanning, Guided Fixes, Usability Widget, Email Deliverability - SMTP Replacement, Email API Deliverability & Email Log, Activity Log - Monitor User and Agent Changes, Angie - Agentic AI, Manage - Centralized site maintenance and monitoring, Hello Plus, Cookiez - GDPR & CCPA Cookie Banner & Consent Manager, Elementor Beta (Developer Edition), Temporary Login, Elementor Blocks for Gutenberg, Linker - URL shortener & track outbound link clicks

Questions

Is Elementor Website Builder - more than just a page builder still maintained?

Elementor Website Builder - more than just a page builder was last updated on 2 Nov 2026. Its Canary status is Watch.

Is Elementor Website Builder - more than just a page builder safe?

Elementor Website Builder - more than just a page builder has no open unpatched vulnerabilities on record. 22 vulnerabilities were published in the last 24 months. Its Canary status is Watch.

Who owns Elementor Website Builder - more than just a page builder?

The wordpress.org author is Elementor. Recent committers: elemntor, KingYes. New committer elemntor made a first commit on 1 Sep 2026.

What can I use instead of Elementor Website Builder - more than just a page builder?

Plugins in the same category with a higher Canary Score: Fusion Page Builder, SKT Page Builder, Landing Page Builder - Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages, Beaver Builder Page Builder - Drag and Drop Website Builder, Colibri Page Builder.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue