HA
Product
Happy Addons for Elementor
28
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 26Low 0
Watch
Add Happy Addons for Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-48045 | 8.8 | Nov 1 | Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This… Affected: before 3.12.4 |
| CVE-2024-24833 | 8.8 | May 8 | Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons.This issue affects Happy Addons for Elementor: from n/a through <= 3.10.1 Affected: through 3.10.1 |
| CVE-2026-62080 | 6.5 | Sep 30 | WordPress Happy Addons for Elementor plugin <= 3.23.1 - Cross Site Scripting (XSS) vulnerability Affected: through 3.23.1 |
| CVE-2024-5647 | 6.4 | Jul 3 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library Affected: through 3.12.2 |
| CVE-2024-10538 | 5.4 | Nov 12 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the before_label parameter in the Image Comparison widget in all versions up… Affected: before 3.12.6 |
| CVE-2024-47357 | 5.4 | Oct 6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Stored… Affected: through 3.12.0 |
| CVE-2024-6627 | 5.4 | Jul 27 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's PDF View widget in all versions up to, and including, 3.11.2 due… Affected: through 3.11.2 |
| CVE-2024-5347 | 5.4 | May 31 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'arrow' attribute within the plugin's Post Navigation widget in all… Affected: before 3.11.0 |
| CVE-2024-5041 | 5.4 | May 31 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ha-ia-content-button’ parameter in all versions up to, and including,… Affected: through 3.10.9 |
| CVE-2024-5088 | 5.4 | May 18 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and including, 3.10.8 due to… Affected: through 3.10.8 |
| CVE-2024-4865 | 5.4 | May 18 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and including, 3.10.8 due to… Affected: through 3.10.8 |
| CVE-2024-4391 | 5.4 | May 16 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Event Calendar widget in all versions up to, and including,… Affected: through 3.10.7 |
| CVE-2024-4478 | 5.4 | May 16 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack Group widget in all versions up to, and including, 3.10.7 due… Affected: through 3.10.7 |
| CVE-2024-3891 | 5.4 | May 2 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML tags in widgets in all versions up to, and including, 3.10.5 due to… Affected: through 3.10.5 |
| CVE-2024-3724 | 5.4 | May 2 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Stack Group, Photo Stack, & Horizontal Timeline widgets in… Affected: through 3.10.4 |
| CVE-2024-3890 | 5.4 | Apr 26 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Calendly widget in all versions up to, and including, 3.10.5 due to… Affected: through 3.10.5 |
| CVE-2024-32698 | 5.4 | Apr 22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons.This issue… Affected: through 3.10.4 |
| CVE-2024-2789 | 5.4 | Apr 9 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Calendy widget in all versions up to, and including, 3.10.4 due… Affected: through 3.10.4 |
| CVE-2024-2788 | 5.4 | Apr 9 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Title HTML Tag in all versions up to, and including, 3.10.4 due to… Affected: through 3.10.4 |
| CVE-2024-2787 | 5.4 | Apr 9 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title HTML Tag in all versions up to, and including, 3.10.4 due to… Affected: through 3.10.4 |
| CVE-2024-2786 | 5.4 | Apr 9 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 3.10.4 due to… Affected: through 3.10.4 |
| CVE-2024-1498 | 5.4 | Apr 9 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Photo Stack Widget in all versions up to, and including, 3.10.3… Affected: through 3.10.3 |
| CVE-2024-29108 | 5.4 | Mar 19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leevio Happy Addons for Elementor allows Stored XSS.This issue affects Happy… Affected: through 3.10.1 |
| CVE-2024-1377 | 5.4 | Mar 7 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author_meta_tag’ attribute of the Author Meta widget in all versions up… Affected: through 3.10.3 |
| CVE-2024-1366 | 5.4 | Mar 7 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘archive_title_tag’ attribute of the Archive Title widget in all versions… Affected: through 3.10.3 |
| CVE-2024-0838 | 5.4 | Feb 29 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the side image URL parameter in the Age Gate in all versions up to, and… Affected: through 3.10.2 |
| CVE-2024-0438 | 5.4 | Feb 29 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapper link parameter in the Age Gate in all versions up to, and… Affected: before 3.10.2 |
| CVE-2024-1387 | 4.3 | Apr 9 | The Happy Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to insufficient authorization on the duplicate_thing() function in all… Affected: through 3.10.4 |
Showing 28