Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits

Vulnerabilities 34Slug master-addonsLatest version 3.0.9WordPress.org →

Minimum safe version

2.1.4

Update to 2.1.4 or later to address 34 fixable vulnerabilities

Latest available3.0.9 ✓
Medium 6.1
2026-05-01< 2.0.7.3

CVE-2024-13362

CVEWordfence
N/A
2026-02-19< 2.1.2

Master Addons For Elementor <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text'

WordfenceCVE
Medium 5.9
2026-03-16< 2.1.4

Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits <= 2.1.3 - Authenticated (Author+) Stored Cross-Site Scripting

WordfenceCVE
Medium 6.4
2025-08-12< 2.0.9.1

Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox

EUVDWordfenceCVE
Medium 6.4
2025-07-16< 2.0.8.3

Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 6.4
2025-03-04< 2.0.7.2

Master Addons <= 2.0.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

EUVDWordfenceCVE
Medium 6.4
2025-03-04< 2.0.7.3

Master Addons <= 2.0.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

EUVDWordfenceCVE
Medium 5.4
2025-01-06< 2.0.6.8

WordPress Master Addons for Elementor Plugin <= 2.0.6.7 is vulnerable to Cross Site Scripting (XSS)

PatchstackWordfenceCVE
Medium 6.3
2024-10-16< 1.8.5

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE
N/A
< 2.0.4

Master Addons for Elementor &lt; 2.0.4 - Contributor+ Stored XSS

WPScan
N/A
2023-10-11< 2.0.4

WordPress Master Addons for Elementor Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Patchstack
N/A
2023-10-11< 2.0.4

Master Addons for Elementor <= 2.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting

Wordfence
N/A
2023-07-18< 2.0.3

WordPress Master Addons for Elementor Plugin < 2.0.3 is vulnerable to Cross Site Scripting (XSS)

PatchstackWPScanCVE
N/A
2022-03-04< 1.8.5

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence
N/A
2022-02-28< 1.8.5

WordPress Master Addons for Elementor plugin < 1.8.5 - Sensitive Information Disclosure vulnerability

Patchstack
N/A
2022-02-28< 1.8.5

WordPress Master Addons for Elementor plugin < 1.8.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack