Skip to content
PluginCanary

Xpro Addons - 150+ Widgets for Elementor

by Xpro · 40,000+ active installs · Checked 3 Nov 2026
Healthy4 Warnings

Healthy: vulnerability published 22 Oct 2026, fixed in 1.7.11.

81/ 100 Canary Score
Sub-scores for Xpro Addons - 150+ Widgets for Elementor
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 22 Oct 2026, fixed in 1.7.11. Update to version 1.7.11 or later.22 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 14 Sep 2026, fixed in 1.7.9. Update to version 1.7.9 or later.14 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 2 Sep 2026, fixed in 1.7.8. Update to version 1.7.8 or later.2 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 1 Sep 2026, fixed in 1.7.4. Update to version 1.7.4 or later.1 Sep 2026Evidence
  • InfoSEC-319 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master21 Mar 2022 to 21 Mar 2022, 1 commits
xpro22 Mar 2022 to 20 Oct 2026, 167 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
15 days ago
Releases, 24 months
0
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+

Last release 20 Oct 2026. Tested with WordPress 7.1 (current). Release history builds as we see new versions.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
22 Oct 2026Xpro Addons — 150+ Widgets for Elementor <= 1.7.10 - Cross-Site Request Forgery4.3<= 1.7.101.7.11n/a
14 Sep 2026Xpro Elementor Addons <= 1.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.7.81.7.9n/a
2 Sep 2026Xpro Addons — 140+ Widgets for Elementor < 1.7.8 - Unauthenticated Information Exposure5.3< 1.7.81.7.8n/a
1 Sep 2026Xpro Elementor Addons <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.7.31.7.4n/a
4 Aug 2026Xpro Addons <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Creation via get_menu_content_editor() Function4.3<= 1.5.11.5.2n/a
23 Jun 2026Xpro Addons <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'custom_attributes' Parameter of Multiple Widgets6.4<= 1.7.21.7.3n/a
19 May 2026Xpro Addons — 140+ Widgets for Elementor <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creation5.3<= 1.5.01.5.1n/a
3 Apr 2026Xpro Addons — 140+ Widgets for Elementor <= 1.4.20 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.4.201.4.21n/a
3 Apr 2026Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Box Widget6.4<= 1.4.241.4.25n/a
30 Mar 2026Xpro Elementor Addons <= 1.5.1 - Authenticated (Contributor+) SQL Injection6.5<= 1.5.11.5.2n/a
26 Feb 2026Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link6.4<= 1.4.241.4.25n/a
19 Jan 2026Xpro Elementor Addons <= 1.4.19.1 - Authenticated (Author+) Arbitrary File Upload8.8<= 1.4.19.11.4.20n/a
6 Dec 2025Xpro Elementor Addons <= 1.4.19.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.4.19.11.4.20n/a
27 Aug 2025Xpro Elementor Addons <= 1.4.17 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.4.171.4.18n/a
4 Apr 2025Xpro Elementor Addons <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.4.101.4.11n/a
19 Mar 2025140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Site Title' widget6.4<= 1.4.7.11.4.8n/a
7 Mar 2025140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.4.6.71.4.6.8n/a
7 Jan 2025140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication4.3<= 1.4.6.21.4.6.3n/a
5 Dec 2024140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.4.6.51.4.6.6n/a
4 Nov 2024140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template4.3<= 1.4.61.4.6.1n/a
26 Aug 2024140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Grid Widget6.4<= 1.4.4.31.4.4.4n/a
7 Aug 2024Xpro Elementor Addons <= 1.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.4.4.21.4.4.3n/a
22 May 2024140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection8<= 1.4.3.11.4.3.2n/a
13 May 2024140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4<= 1.4.31.4.3.1n/a
7 May 2024140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3 - Authenticated (Admin+) Cross Site Scripting4.4<= 1.4.31.4.3.1n/a

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Xpro Addons - 150+ Widgets for Elementor
Q4 20235.0
Q2 20245.0
Q3 20245.0
Q4 20243.0
Q1 20251.0

Average rating fell from 5.0 to 1.0 between Q4 2023 and Q1 2025.

Rating distribution
5 star24
4 star0
3 star0
2 star0
1 star4
Latest low reviews

Momentum

40,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Xpro Addons - 150+ Widgets for Elementor
4 May 20261,392
11 May 202612,218
18 May 202611,647
25 May 202610,726
1 Jun 20263,344
8 Jun 20263,186
15 Jun 202610,916
22 Jun 20265,900
29 Jun 20263,995
6 Jul 202612,965
13 Jul 20263,958
20 Jul 202612,607
27 Jul 202612,075
3 Aug 20265,913
10 Aug 202613,763
17 Aug 20263,634
24 Aug 202612,544
31 Aug 20264,939
7 Sep 202613,264
14 Sep 20265,834
21 Sep 20263,422
28 Sep 202610,441
5 Oct 20265,575
12 Oct 20262,775
19 Oct 202613,507
26 Oct 20265,106
2 Nov 2026358

Weekly downloads over the last 4 weeks are 29% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline)Score 93 · 70,000+Xpro Theme Builder For Elementor - FREEScore 93 · 20,000+Ultimate Addons for Beaver Builder (UABB)Score 93 · 20,000+Header Footer Builder for ElementorScore 92 · 30,000+Conditional Fields for Elementor Form - Apply Conditional LogicScore 92 · 10,000+

Facts

Version1.7.11
AuthorXpro
Added22 Mar 2022
Last updated20 Oct 2026
Active installs40,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryDesign & Themes > Page Builders & Visual Editors
Tagselementor, elementor widgets, addons for elementor, widgets for elementor, woocommerce elementor

Other plugins by this author: Xpro Theme Builder For Elementor - FREE, Xpro Addons For Beaver Builder - Lite, Xpro Slider For Beaver Builder - Lite, Xpro Gallery For Beaver Builder - Lite, Xpro Portfolio For Beaver Builder - Lite

Questions

Is Xpro Addons - 150+ Widgets for Elementor still maintained?

Xpro Addons - 150+ Widgets for Elementor was last updated on 20 Oct 2026. Its Canary status is Healthy.

Is Xpro Addons - 150+ Widgets for Elementor safe?

Xpro Addons - 150+ Widgets for Elementor has no open unpatched vulnerabilities on record. 20 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Xpro Addons - 150+ Widgets for Elementor?

The wordpress.org author is Xpro. Recent committers: xpro, plugin-master. We have recorded no ownership change.

What can I use instead of Xpro Addons - 150+ Widgets for Elementor?

Plugins in the same category with a higher Canary Score: Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline), Xpro Theme Builder For Elementor - FREE, Ultimate Addons for Beaver Builder (UABB), Header Footer Builder for Elementor, Conditional Fields for Elementor Form - Apply Conditional Logic.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue