PLUGIN SECURITY

Is Hello Plus safe?

Hello+ is a free WordPress plugin designed to work seamlessly with Elementor’s Hello suite of themes.

What this plugin does

  • Slug: hello-plus
  • Author: Elementor
  • 70000+ active installs
  • 60/100 rating (1 review on wordpress.org)
  • 577428 all-time downloads
  • On WordPress.org since 2024-12-05

elementorhello plushello themesthemeswidgets

Maintenance status

  • Latest known version: 1.7.8
  • Last updated: 2026-05-19 1:56pm GMT
  • Tested up to WordPress: 6.8.11
  • Requires PHP: 7.4+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

1 known CVE on file for Hello Plus. Reported between 2026 and 2026.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-5727 Hello Plus [hello-plus] < 1.7.8 Missing Authorization Medium 5.4 < 1.7.8 1.7.8 2026-10-10 ✓ fixed in latest

How to fix it

Keep Hello Plus updated — 1.7.8 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.