elementor-mcp-wordpress-builder
Warn
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill recommends using
npx -y @msrbuilds/emcp-proxy@latestto establish a proxy connection. This command downloads and executes a remote JavaScript package from the NPM registry at runtime, which is an unverified external source. - [EXTERNAL_DOWNLOADS]:
- The installation instructions direct users to download a plugin archive from
github.com/msrbuilds/elementor-mcp/releases, which is an external repository not associated with a verified organization. - The
sideload-imagetool allows the agent to fetch images from any arbitrary URL and import them into the WordPress media library, which could be used to ingest malicious files or perform server-side request forgery (SSRF). - [COMMAND_EXECUTION]: Several tools facilitate the injection of executable or styling code into the target WordPress site:
add-custom-code-snippet: Enables the injection of arbitrary HTML and JavaScript into site headers or footers, posing a risk of persistent XSS or site redirection.add-element-css,add-page-css, andupdate-page-settings: Allow the injection of arbitrary CSS, which can be leveraged for UI redressing (clickjacking) or to exfiltrate data via CSS-based triggers.add-text-editor: Ingests raw HTML content into page widgets, providing a surface for HTML injection.- [CREDENTIALS_UNSAFE]: The configuration process requires the generation of Base64-encoded credentials (username and application password) to be stored in plain-text configuration files like
claude_desktop_config.jsonand.cursor/mcp.json.
Audit Metadata