Royal Addons for Elementor – Addons and Templates Kit for Elementor

Elementor templates, Header footer builder, Elementor Post Grid, Woocommerce Grid builder, Slider, Forms, Gallery, Nav menu addons, Elementor widgets.

v1.7.1064WP RoyalUpdated Added 600k+ installs96% rating93% support resolved
21
Score
13,011
Errors
2,530
Warnings
+0
Change

Category Scores

Security0
Repo88
Performance82
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

15,541 findings

I18n

11,882

4 issue groups

Security

1,793

7 issue groups

Maintainability

1,719

12 issue groups

Performance

33

2 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'royal-elementor-addons' but got "wpr-addons".11,672
Category
I18n
Occurrences
11,672
Severity
error

Sample message

Mismatched text domain. Expected 'royal-elementor-addons' but got "wpr-addons".

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_product".1,133
Category
Maintainability
Occurrences
1,133
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$_product".

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.964
Category
Security
Occurrences
964
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '" <a href='{$skip_url}' class='button button-small button-secondary'>{$use_plugin_anonymously_text}</a>"'.

WARNINGSecurityRequest data is not unslashed$_COOKIE[&#039;wpr_compare&#039;] not unslashed before sanitization. Use wp_unslash() or similar213
Category
Security
Occurrences
213
Severity
warning

Sample message

$_COOKIE[&#039;wpr_compare&#039;] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;_fs_text&quot;.181
Category
Maintainability
Occurrences
181
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;_fs_text&quot;.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE[&#039;wpr_compare&#039;]179
Category
Security
Occurrences
179
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE[&#039;wpr_compare&#039;]

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.155
Category
Security
Occurrences
155
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST[&#039;form_content&#039;]. Check that the array index exists before using it.140
Category
Security
Occurrences
140
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST[&#039;form_content&#039;]. Check that the array index exists before using it.

WARNINGMaintainabilityNon-prefixed constantGlobal constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_API__ADDRESS&quot;.103
Category
Maintainability
Occurrences
103
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_API__ADDRESS&quot;.

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_Admin_Menu_Manager&quot;.97
Category
Maintainability
Occurrences
97
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: &quot;FS_Admin_Menu_Manager&quot;.

Show 15 more
ERRORI18nMissing Translators Comment95
Category
I18n
Occurrences
95
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilityNon-prefixed hook name82
Category
Maintainability
Occurrences
82
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;elementor/page_templates/canvas/after_content&quot;.

WARNINGSecurityNonce verification recommended81
Category
Security
Occurrences
81
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORSecuritySetting is missing a sanitization callback61
Category
Security
Occurrences
61
Severity
error

Sample message

Sanitization missing for register_setting().

ERRORI18nMissing Arg Domain60
Category
I18n
Occurrences
60
Severity
error

Sample message

Missing $domain parameter in function call to __().

ERRORI18nNon Singular String Literal Text55
Category
I18n
Occurrences
55
Severity
error

Sample message

The $text parameter must be a single text string literal. Found: $content['repeater_date_label']

WARNINGMaintainabilityslow db query tax query29
Category
Maintainability
Occurrences
29
Severity
warning

Sample message

Detected usage of tax_query, possible slow query.

WARNINGPerformancePost Not In exclude20
Category
Performance
Occurrences
20
Severity
warning

Sample message

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

WARNINGMaintainabilityslow db query meta key18
Category
Maintainability
Occurrences
18
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

ERRORMaintainabilitydate date18
Category
Maintainability
Occurrences
18
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilitywp function not compatible with requires wp17
Category
Maintainability
Occurrences
17
Severity
error

Sample message

Function "str_contains()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.0.0.

WARNINGMaintainabilityNot In Footer15
Category
Maintainability
Occurrences
15
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNINGMaintainabilityMissing Version14
Category
Maintainability
Occurrences
14
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGPerformancePost Not In post not in13
Category
Performance
Occurrences
13
Severity
warning

Sample message

Using exclusionary parameters, like post__not_in, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERRORMaintainabilityMissing direct file access protection12
Category
Maintainability
Occurrences
12
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

External Connections

Potential connections found in static code analysis.

19 domains

Outbound calls

268

External assets

0

Incoming endpoints

32

Notable Domains

youtube.com34 · outbound
reastats.kinsta.cloud12 · outbound
youtu.be6 · outbound

Platform / Reference Domains

w3.org48 · platform/reference
wordpress.org17 · platform/reference
plugins.trac.wordpress.org3 · platform/reference
github.com1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints32
wp_ajax_render_library_templates_blocksauthenticated

wp_ajax

wp_ajax_render_library_templates_pagesauthenticated

wp_ajax

wp_ajax_render_library_templates_pages_grid_itemsauthenticated

wp_ajax

wp_ajax_render_library_templates_popupsauthenticated

wp_ajax

wp_ajax_render_library_templates_sectionsauthenticated

wp_ajax

wp_ajax_wpr_activate_required_pluginsauthenticated

wp_ajax

wp_ajax_wpr_activate_required_themeauthenticated

wp_ajax

wp_ajax_wpr_backend_freepro_search_query_resultsauthenticated

wp_ajax

wp_ajax_wpr_backend_widget_search_query_resultsauthenticated

wp_ajax

wp_ajax_wpr_create_mega_menu_templateauthenticated

wp_ajax

wp_ajax_wpr_create_templateauthenticated

wp_ajax

wp_ajax_wpr_delete_templateauthenticated

wp_ajax

20 more hidden

Score History

2 score snapshots

+0
1007550250Jun 19, 2026, 10:10 PM UTC Score 21/100 Plugin v1.7.1063 Plugin Check 2.0.0 13,011 errors, 2,530 warningsJun 25, 2026, 11:48 AM UTC Score 21/100 Plugin v1.7.1064 Plugin Check 2.0.0 13,011 errors, 2,530 warningsJun 19, 2026Jun 25, 2026

v1.7.1064

21

Latest

Findings
15,541
Errors
13,011
Warnings
2,530
Check
2.0.0

v1.7.1063

21

Score

Findings
15,541
Errors
13,011
Warnings
2,530
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related

Related Plugins