What’s Vulnerable › Products

thehappymonster Happy Addons for Elementor vulnerabilities

35 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your thehappymonster Happy Addons for Elementor version is affected

Latest thehappymonster Happy Addons for Elementor vulnerabilities

• CVE-2026-62080 — WordPress Happy Addons for Elementor plugin <= 3.23.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-2918 — Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions (CVSS 6.4)
• CVE-2026-2917 — Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter (CVSS 5.4)
• CVE-2026-1210 — Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field (CVSS 6.4)
• CVE-2025-68999 — WordPress Happy Addons for Elementor plugin <= 3.20.4 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2025-14635 — Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS (CVSS 6.4)
• CVE-2025-63077 — WordPress Happy Addons for Elementor plugin <= 3.20.3 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-5647 — Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library (CVSS 6.4)
• CVE-2025-30766 — WordPress Happy Addons for Elementor plugin <= 3.16.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
• CVE-2024-10538 — Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison (CVSS 5.4)
• CVE-2024-48045 — WordPress Happy Elementor Addons plugin <= 3.12.3 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2024-47357 — WordPress Happy Addons for Elementor plugin <= 3.12.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-6627 — Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget (CVSS 5.4)
• CVE-2024-5347 — Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget (CVSS 5.4)
• CVE-2024-5041 — Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion (CVSS 5.4)
• CVE-2024-5088 — Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-4865 — Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter (CVSS 5.4)
• CVE-2024-4391 — Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget (CVSS 5.4)
• CVE-2024-4478 — Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget (CVSS 5.4)
• CVE-2024-24833 — WordPress Happy Addons for Elementor plugin <= 3.10.1 - Broken Access Control on Post Clone vulnerability (CVSS 8.8)
• CVE-2024-3891 — Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags (CVSS 5.4)
• CVE-2024-3724 — Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline (CVSS 5.4)
• CVE-2024-3890 — Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget (CVSS 5.4)
• CVE-2024-32698 — WordPress Happy Addons for Elementor plugin <= 3.10.4 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-2789 — Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy (CVSS 5.4)