Elements Plus!

2.16.5

Improved sanitization. Fixes CVE-2025-8689 (props zer0gh0st).

Fixed gettext domain issues.

2.16.4

Properly escape all output. Fixes Cross Site Scripting (XSS) issues (props Abu Hurayra).

2.16.3

Properly escape links on output. Fixes CVE-2024-2335

Fixed issues caused by namespace change of the SafeSVG plugin.

Removed hooks on actions element/before_render and element/after_render that were deprecated before Elementor v2.2

Fixed issue where Hotspots element would throw a warning when saved without an image assigned.

Replaced calls to deprecated Elementor\Core\Schemes\Typography and Elementor\Core\Schemes\Color classes.

Fixed Button element icon.

2.16.2

Fixed issues caused by namespace change of the SafeSVG plugin.

2.16.1

Removed deprecated Instagram Plus! element.

2.16

Replaced deprecated (since Elementor 3.5) action ‘elementor/widgets/widgets_registered’ and method register_widget_type()

2.15

Elements now use the Elementor Icons control.

Fixed issue on YouTube slider Plus due to removal of slick slider from Elementor.

Preloader Plus now uses Elementor icons.

Replaced deprecated method _register_controls()

Fixed fatal errors due to Scheme_Typography and Scheme_Color class removals.

2.14.2

Removed migration function which would cause issues in certain installations.

2.14.1

Fixed Tilt Plus! conflict with Elementor PRO.

Google Maps Plus! won’t load maps API key URL if element is disabled.

Fixed PHP notice for missing API key on new installations