Premium Addons for Elementor – Powerful Elementor Templates & Widgets

Elementor Carousel, Mega Menu, Posts List/Slider, Media Gallery, WooCommerce Widgets, Display Conditions, Premade Templates & more.

v4.11.82Leap13Updated 2026-06-11Added Jan 9, 2018700k+ installs98% rating100% support resolved
23
Score
206
Errors
997
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance83
Maintainability0

Top Issues by Category

maintainability999
security89
i18n81
performance9

Issues Details

1,203 issues found in latest scan

WARNING513
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "'pa_pinterest_token_' . $widget_id".

WARNING393
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_link".

ERROR56
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$bg_css'.

ERROR48
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'premium-addons-for-elementor' but got 'elementor'.

ERROR31
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING29
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_rplg_curl_urlopen".

WARNING13
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

ERROR10
WordPress.WP.I18n.NonSingularStringLiteralText

The $text parameter must be a single text string literal. Found: $settings['subtotal_txt']

WARNING9
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET['is_id'] not unslashed before sanitization. Use wp_unslash() or similar

ERROR9
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERROR7
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

ERROR7
WordPress.WP.I18n.NoEmptyStrings

The $text text string should have translatable content. Found: '%1$s'

WARNING6
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_POST['itemKey']

ERROR6
WordPress.WP.AlternativeFunctions.curl_curl_close

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNING5
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING5
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

WARNING4
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "PINTEREST_API_URL".

ERROR4
WordPress.WP.AlternativeFunctions.curl_curl_getinfo

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR4
WordPress.WP.AlternativeFunctions.curl_curl_setopt

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

WARNING4
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_post__not_in

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

WARNING3
WordPress.DB.SlowDBQuery.slow_db_query_meta_key

Detected usage of meta_key, possible slow query.

ERROR3
WordPress.WP.AlternativeFunctions.curl_curl_exec

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR3
WordPress.WP.AlternativeFunctions.curl_curl_init

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR3
WordPress.WP.AlternativeFunctions.curl_curl_setopt_array

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERROR3
WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

Latest Snapshot

Findings

1,203

Errors

206

Warnings

997

Score History

First score snapshot

First scan completed Jun 19, 2026

v4.11.82 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 19, 2026

v4.11.82

23

Latest

Findings
1,203
Errors
206
Warnings
997
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins