Elementor MCP

by msrbuilds• 758•• Scanned•Claim this listing•Request removal
Content & Writingelementormcp serverwordpresswordpress plugin

WordPress MCP server with 234 Free tools and 547 total with Pro for building pages, managing content, and operating your site. Availability depends on installed integrations and enabled tools.

Elementor MCP is an open-source mcp server by msrbuilds, written mainly in PHP, with 758 GitHub stars and the GPL-2.0 license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 5, 2026 at commit e0abbaf. Seen able to run dynamic code, connect to the internet. Scan policy

Scanned
Full scan at e0abbaf · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanpass
Dependency audit35 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshakefail
Network egressfail
Reproducible (×3)n/a

Findings (28)

  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    body-parser@1.20.8: 1 known vulnerability
    GHSA-27r3-jxmh-p828
    package-lock.json
  • medium
    follow-redirects@1.16.0: 3 known vulnerabilities
    GHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
    package-lock.json
  • medium
    launch-editor@2.14.1: 3 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw
    package-lock.json
  • medium
    markdown-it@14.3.2: 2 known vulnerabilities
    GHSA-gfr2-rv44-r23c, GHSA-vfgh-jcmw-g37q
    package-lock.json
  • medium
    serialize-javascript@6.0.2: 3 known vulnerabilities
    GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v
    package-lock.json
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    package-lock.json
  • medium
    uuid@8.3.2: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    package-lock.json
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    package-lock.json
  • medium
    zod@4.6.5: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    package-lock.json
  • medium
    MCP server didn't complete the protocol handshake
    timed out waiting for the server
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    scripts/e2e/admin-subtabs.test.cjs:31
  • low
    enshrined/svg-sanitize@0.22.0: 3 known vulnerabilities
    GHSA-9rjx-3jch-6vjf, GHSA-m9xh-6747-9r6f, GHSA-v383-3rw5-q8rf
    composer.lock
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    package-lock.json
  • low
    diff@7.0.0: 1 known vulnerability
    GHSA-73rr-hh4g-fpgx
    package-lock.json
  • low
    fast-uri@3.1.8: 4 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h
    package-lock.json
  • low
    glob@10.5.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    package-lock.json
  • low
    glob@13.0.6: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    package-lock.json
  • low
    js-yaml@5.2.3: 1 known vulnerability
    GHSA-r3ph-w7gj-g6xm
    package-lock.json
  • low
    katex@0.16.47: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    package-lock.json
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    package-lock.json
  • low
    minimatch@9.0.9: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    package-lock.json
  • low
    postcss-selector-parser@6.1.4: 1 known vulnerability
    GHSA-rj75-hqrm-r3gf
    package-lock.json
  • low
    qs@6.16.0: 1 known vulnerability
    GHSA-6pq8-jhm2-2vcw
    package-lock.json
  • low
    smol-toml@1.7.2: 1 known vulnerability
    GHSA-r4xh-jqrq-34v2
    package-lock.json
  • low
    No manifest declaring network access and environment variables (agent.json)
  • low
    Contacted these domains while starting up (no manifest to compare against)
    registry.npmjs.org

Network activity

During install
registry.npmjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Elementor MCP alternatives

View more →

Similar mcp servers in Content & Writing, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Elementor MCP (this page)
msrbuilds
758GPL-2.0Nov 1, 2026Scanned, no flagged issues
Context7
upstash
64kMITNov 1, 2026Scanned, no flagged issues
Md2wechat Skill
geekjourneyx
3.8kNone foundOct 14, 2026Not scanned yet
Cortex
cortex-docs
3.3kMITOct 6, 2026Scanned, no flagged issues
Markdownify MCP
zcaceres
3kMITOct 26, 2026Scanned, no flagged issues
LLM Wiki Compiler
atomicstrata
2.2kMITOct 30, 2026Scanned, no flagged issues