PLUGIN SECURITY
Is Futurio Extra safe?
Futurio Extra add extra features to Futurio theme like widgets, WooCommerce options, Elementor widgets, one click demo import and much more.
What this plugin does
- Slug:
futurio-extra - Author: FuturioWP
- 10000+ active installs
- 100/100 rating (1 review on wordpress.org)
- 784848 all-time downloads
- On WordPress.org since 2018-11-09
demoelementorpage buildershortcodeswoocommerce
Maintenance status
- Last updated: 2026-11-09 7:42am GMT
- Tested up to WordPress: 7.1.4
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
8 known CVEs on file for Futurio Extra. Reported between 2022 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-125433 | Futurio Extra [futurio-extra] < 2.0.26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 2.0.26 | 2.0.26 | 2026-11-11 | — |
| CVE-2024-53802 | Futurio Extra [futurio-extra] < 2.0.15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 2.0.15 | 2.0.15 | 2024-12-02 | — |
| CVE-2024-10695 | Futurio Extra [futurio-extra] < 2.0.14 | Authorization Bypass Through User-Controlled Key | Medium 4.3 | < 2.0.14 | 2.0.14 | 2024-11-11 | — |
| CVE-2024-50446 | Futurio Extra [futurio-extra] < 2.0.12 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 2.0.12 | 2.0.12 | 2024-10-24 | — |
| CVE-2024-5646 | Futurio Extra [futurio-extra] < 2.0.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.0.6 | 2.0.6 | 2024-06-11 | — |
| CVE-2023-40201 | Futurio Extra [futurio-extra] < 1.9.1 | Cross-Site Request Forgery (CSRF) | Medium 6.5 | < 1.9.1 | 1.9.1 | 2023-08-11 | — |
| CVE-2021-25110 | Futurio Extra [futurio-extra] < 1.6.3 | Exposure of Sensitive Information to an Unauthorized Actor | Medium 4.3 | < 1.6.3 | 1.6.3 | 2022-01-14 | — |
| CVE-2021-25109 | Futurio Extra [futurio-extra] < 1.6.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Low 2.7 | < 1.6.3 | 1.6.3 | 2022-01-04 | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder — 2000000+ active installs — 98/100 (2529) — max PHP 8.4
- Essential Addons for Elementor – Popular Elementor Templates & Widgets — 1000000+ active installs — 98/100 (4133) — max PHP 8.4
- Royal Addons for Elementor – Addons and Templates Kit for Elementor — 600000+ active installs — 96/100 (612) — max PHP 8.4
- Template Kit – Import — 400000+ active installs — 68/100 (16)
- HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates — 400000+ active installs — 96/100 (489) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.