--- title: "ElementsKit Elementor Addons" description: "ElementsKit for Elementor, free or Pro: strengths, limitations, pricing, recommended settings and patched vulnerabilities, to decide and configure it well." language: "en" locale: "en-US" type: "plugin-sheet" canonical: "https://www.wp-masquerade.com/features/camouflaged-plugins/elementskit/" published: "2026-11-04T08:00:00+00:00" modified: "2026-11-05T21:06:02+00:00" translations: en-US: "https://www.wp-masquerade.com/features/camouflaged-plugins/elementskit/index.md" fr-FR: "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/elementskit/index.md" es-ES: "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/elementskit/index.md" de-DE: "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/elementskit/index.md" it-IT: "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/elementskit/index.md" pt-BR: "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/elementskit/index.md" nl-NL: "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/elementskit/index.md" --- # ElementsKit Elementor Addons ElementsKit adds widgets, a header and footer builder and a mega menu to Elementor, all free. Our take on the free and Pro versions, the widgets and modules to switch off, the setup wizard traps and the vulnerabilities worth knowing. ## The essentials - Best for free Elementor sites that want a header, footer and mega menu without paying. - Main caveat: the free version shows one header sitewide; per-page conditions require Pro. - Free; Pro from $49 per year excl. VAT for one site at regular price, $249 for unlimited sites. ## What ElementsKit adds to Elementor ElementsKit Elementor Addons is an add-on pack for [Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/elementor/): it does nothing on its own and requires Elementor to be installed and active, though the free version of Elementor is enough. It adds an "ElementsKit" widget category to the editor (headings, buttons, tabs, accordions, FAQ, pricing tables, team, testimonials, post lists and grids, nav menu, header search) plus widgets that style forms built with Contact Form 7, WPForms, Ninja Forms, Fluent Forms or weForms. The real draw is its free modules: a header and footer builder, a mega menu builder hooked into WordPress menus, a no-code widget builder, one-page scrolling and an icon pack. A library of ready-made sections and pages also opens from the editor. Every widget and module can be switched off on its own, and the developer says the files of disabled elements are no longer loaded. The plugin is made by Wpmet (listed as Roxnor on wordpress.org). ElementsKit Pro is a separate plugin installed on top of the free one: it adds detailed display conditions for headers, advanced widgets (login and registration, data tables, charts, timeline, modal popup, WooCommerce products, social feeds) and modules such as conditional content, sticky content and parallax. ![Diagram: ElementsKit Elementor Addons works on visitors and bots, wordpress, database and files. Public traces: folder name (hidden with Pro); tag IDs (hidden with Pro); JavaScript variables (still visible); CSS classes (still visible).](https://www.wp-masquerade.com/media/wpm-sheets/elementskit/diagram-en.svg?v=3692934c) ## Which sites ElementsKit suits best ElementsKit earns its place once free Elementor no longer covers your site's structure: - **Business sites built with free Elementor**: the header and footer builder saves you from buying Elementor Pro just for a sitewide header. - **Sites with big menus** (service catalogs, stores, portals): the mega menu shows columns, images or an Elementor section under a menu item. - **Sites that already have a form plugin**: the styling widgets dress up Contact Form 7 or WPForms without switching form plugins. It's the wrong pick if you already own Elementor Pro and its Theme Builder, which handles headers and footers, or if you may leave Elementor someday: ElementsKit widgets vanish from your pages as soon as the plugin is deactivated. If you mostly want widgets, compare it with [Essential Addons for Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/essential-addons-for-elementor/) and don't install two packs that do the same job. ## ElementsKit strengths and limitations ### Strengths - **Free headers, footers and mega menu.** Three features many Elementor sites pay for elsewhere come in the free version. - **Granular toggles.** Every widget and module can be turned off in the settings, which lightens pages and cuts the amount of active code. - **Works with your forms.** Dedicated widgets style Contact Form 7, WPForms, Ninja Forms, Fluent Forms and weForms. - **Affordable entry-level Pro license.** The Personal plan costs $49 per year excluding VAT (regular price) for one site, with a 14-day refund window. ### Limitations - **One header in the free version.** The only free display condition is "Entire Site"; a header per page, per archive or for the 404 page requires Pro. - **Key widgets are Pro only.** Login and registration, WooCommerce products, social feeds, conditional content and sticky content are paid. - **A busy vulnerability record.** Several flaws exploitable without an account were published from 2023 to 2026, plus a file inclusion bug rated 8.8. - **A sales-minded setup wizard.** It offers to install the developer's other plugins in one click and asks consent for usage data and promotional messages. ## The settings we recommend for ElementsKit The settings live in the ElementsKit admin menu, under the Dashboard, Widgets, Modules and User Settings tabs. All of them exist in the current free version. | Setting | Recommended value | Why | | --- | --- | --- | | **Widget preset** Setup wizard, first step | "Basic (Recommended)" or "Custom" | "Advanced" turns on every free widget; it's better to start small and add what you need. | | **Suggested plugins** Setup wizard, plugins step | "Continue" with nothing checked | "Unlock All & Continue" installs and activates every listed plugin from the developer, and each one is more code to maintain. | | **Diagnostic data sharing** Setup wizard, next step | "Skip" | This box allows usage data to be sent and promotional messages to appear on your Dashboard. | | **Unused widgets** ElementsKit > ElementsKit > Widgets | Off | The developer says the files of disabled widgets are no longer loaded. | | **Onepage Scroll** ElementsKit > ElementsKit > Modules | Off, unless you run a one-page site | Rarely needed, and the module hit by the plugin's most serious flaw in 2024. | | **Widget Builder** Same screen | Off if you don't build widgets | It writes PHP files to `wp-content/uploads/elementskit/custom_widgets/` and has needed several security fixes. | | **Enable SVG Icon** ElementsKit > ElementsKit > User Settings | Off (default) | The developer labels it experimental and suggests turning it off if icons misbehave. | | **Header conditions** ElementsKit > Header Footer | One active template per type, on "Entire Site" | In the free version, two active headers both target the whole site: keep one so you know which one shows. | - Open three public pages in a private window: the ElementsKit header and footer should appear on all of them. - After turning widgets off, open your main pages: a disabled widget that's still in use disappears from the page. - In Appearance > Menus, check that the mega menu option is enabled only on the menu that needs it. - In Plugins, check that no Wpmet plugin was installed without your say-so. ## ElementsKit security: access checks keep coming up Most published ElementsKit flaws come down to functions that answered any visitor without checking permissions. The ones worth knowing: - **CVE-2024-3499, up to and including 3.1.0**: local file inclusion in the Onepage Scroll module, exploitable with a contributor account and able to lead to PHP code execution (CVSS 8.8). - **CVE-2024-6455, up to and including 3.2.0**: without an account, anyone could read draft, pending or private Elementor content (CVSS 5.3). - **CVE-2025-0968, up to and including 3.4.0**: the same kind of leak through the mega menu function, trashed items included (CVSS 5.3). - **CVE-2026-4362, up to and including 3.8.2**: without an account, a crafted URL replaced the content of Widget Builder widgets with a blank template (CVSS 6.5). The 2026 changelog lists more fixes, including several stored XSS bugs: stay on the latest version and turn on auto-updates for the plugin (see our guide to plugin auto-updates), then follow its alerts with the method in our article on monitoring plugin vulnerabilities. Elementor has its own record, covered in our article on [Elementor security flaws](https://www.wp-masquerade.com/elementor-security-vulnerabilities/). WP Masquerade Pro renames the ElementsKit folder and the IDs of its CSS and JavaScript files, which makes the plugin harder for bots to spot without replacing updates; the `ekit-*` and `elementskit-*` classes stay visible in the code. ## ElementsKit FAQ **Does ElementsKit work with free Elementor?** Yes. ElementsKit requires Elementor to be installed and active, but not Elementor Pro. Its header and footer builder actually stands in for a feature of the Elementor Pro Theme Builder. **Do I need to keep free ElementsKit after buying Pro?** Yes. Wpmet's documentation says ElementsKit Pro depends on the free version, which must stay installed and active. You then enter the license key under ElementsKit > License. **How much does ElementsKit Pro cost?** At regular prices, outside promotions, the pricing page lists in US dollars excluding VAT $49 per year for one site, $119 for five sites and $249 for unlimited sites. Lifetime licenses are also available, starting at $147 for one site. **Does ElementsKit slow down my site?** It mostly depends on how many widgets and modules are active. Turn off the ones you don't use in the Widgets and Modules tabs, then measure your main pages before and after. **Can I run ElementsKit alongside another Elementor widget pack?** Technically yes, but each pack adds its own files and its own potential flaws. If you already use [Ultimate Addons for Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/ultimate-addons-for-elementor/) for your headers, keep a single tool for that job. ## Key facts - Category: Builders and themes - Vendor: Wpmet - Price: Free; Pro from $49 per year excluding VAT for one site (regular price) - Active installations (wordpress.org): 1 000 000+ - Version: 4.1.0 - Official page: https://wordpress.org/plugins/elementskit-lite/ ## What WP Masquerade hides - Handled by the free version of WP Masquerade - With Pro: folder name, tag IDs - Still visible: JavaScript variables, CSS classes