What’s Vulnerable › Products

weDevs Happy Addons for Elementor vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your weDevs Happy Addons for Elementor version is affected

Latest weDevs Happy Addons for Elementor vulnerabilities

• CVE-2026-109891 — WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability (CVSS 6.4)
• CVE-2026-116850 — WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-104393 — WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-25468 — WordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerability (CVSS 5.3)
• CVE-2024-12852 — Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-8801 — Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure (CVSS 4.3)
• CVE-2024-5790 — Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget (CVSS 5.4)
• CVE-2023-6632 — Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2023-51676 — WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF) (CVSS 6.5)
• CVE-2023-41236 — WordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
• CVE-2023-28989 — WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2021-24292 — Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS (CVSS 5.4)