PLUGIN SECURITY
Is Powerpack Lite For Elementor safe?
40+ free Elementor widgets plus extensions: form stylers for Contact Form 7, WPForms and Gravity Forms, Instagram feed, display conditions, templates.
What this plugin does
- Slug:
powerpack-lite-for-elementor - Author: IdeaBox Creations
- 70000+ active installs
- 96/100 rating (361 reviews on wordpress.org)
- 3880428 all-time downloads
- On WordPress.org since 2019-01-11
elementorelementor addonselementor templateselementor widgetsform styler
Maintenance status
- Last updated: 2026-11-12 1:45am GMT
- Tested up to WordPress: 7.1.4
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
16 known CVEs on file for Powerpack Lite For Elementor.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-125435 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 3.1.4 | Insertion of Sensitive Information Into Sent Data | Medium 5.3 | < 3.1.4 | 3.1.4 | 2026-11-04 | — |
| CVE-2026-110692 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] >= 2.10.0 - < 3.1.3 | Server-Side Request Forgery (SSRF) | Unknown | 2.10.0–3.1.3 | 3.1.3 | 2026-10-22 | — |
| CVE-2026-111400 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 3.1.1 | — | Medium 6.5 | < 3.1.1 | 3.1.1 | 2026-10-16 | — |
| CVE-2026-114182 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 3.1.1 | — | Medium 4.3 | < 3.1.1 | 3.1.1 | 2026-10-16 | — |
| CVE-2026-32430 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.9.10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 2.9.10 | 2.9.10 | 2026-03-01 | — |
| CVE-2026-108488 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 3.1.1 | — | Medium 6.5 | < 3.1.1 | 3.1.1 | 2026-03-01 | — |
| CVE-2024-10692 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.8.2 | Authorization Bypass Through User-Controlled Key | Medium 4.3 | < 2.8.2 | 2.8.2 | 2024-12-05 | — |
| CVE-2024-5787 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.7.21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.7.21 | 2.7.21 | 2024-06-12 | — |
+ 11 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-5327 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.7.20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.7.20 | 2.7.20 | 2024-05-29 | — |
| CVE-2024-2491 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.7.18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.7.18 | 2.7.18 | 2024-03-29 | — |
| CVE-2024-2492 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.7.19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.7.19 | 2.7.19 | 2024-03-29 | — |
| CVE-2024-1411 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.7.16 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.7.16 | 2.7.16 | 2024-02-15 | — |
| CVE-2024-1055 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.7.15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.7.15 | 2.7.15 | 2024-02-06 | — |
| CVE-2023-6984 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.7.14 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 2.7.14 | 2.7.14 | 2024-01-02 | — |
| CVE-2021-25027 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.6.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.6.2 | 2.6.2 | 2021-12-06 | — |
| CVE-2021-24263 | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.3.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.3.2 | 2.3.2 | 2021-04-13 | — |
| — | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.3.2 | — | Unknown | < 2.3.2 | 2.3.2 | 2021-04-13 | — |
| — | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.9.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 2.9.1 | 2.9.1 | 0000-00-00 | — |
| — | PowerPack Addons for Elementor: Widgets, Form Styler and Templates [powerpack-lite-for-elementor] < 2.9.5 | — | Medium 6.4 | < 2.9.5 | 2.9.5 | 0000-00-00 | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder — 2000000+ active installs — 98/100 (2529) — max PHP 8.4
- Essential Addons for Elementor – Popular Elementor Templates & Widgets — 1000000+ active installs — 98/100 (4133) — max PHP 8.4
- ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor — 1000000+ active installs — 98/100 (2051) — max PHP 8.4
- Royal Addons for Elementor – Addons and Templates Kit for Elementor — 600000+ active installs — 96/100 (612) — max PHP 8.4
- Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates — 600000+ active installs — 98/100 (1680) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.