Happy Addons for Elementor vulnerabilities | LiveThreat CVE Feed

Product

Happy Addons for Elementor

by thehappymonster · last CVE Mar 11, 2026

CVEs

On KEV

6.4

Max CVSS

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 0High 0Medium 29Low 0

Severity

All severities29 Critical0 High0 Medium29 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Happy Addons for Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-2918	6.4	0%	Mar 11	Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions Affected: through 3.21.0
CVE-2026-1210	6.4	0%	Feb 3	Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field Affected: through 3.20.7
CVE-2025-14635	6.4	0%	Dec 23	Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS Affected: through 3.20.3
CVE-2023-6632	6.1	1%	Jan 11	Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting Affected: through 3.9.1.1
CVE-2026-2917	5.4	0%	Mar 11	Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter Affected: through 3.21.0
CVE-2024-12852	5.4	0%	Jan 8	Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.15.1
CVE-2024-10538	5.4	0%	Nov 12	Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Affected: through 3.12.5
CVE-2024-6627	5.4	0%	Jul 27	Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget Affected: through 3.11.2
CVE-2024-5790	5.4	0%	Jun 29	Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget Affected: through 3.11.1
CVE-2024-5041	5.4	0%	May 31	Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Affected: through 3.10.9
CVE-2024-5347	5.4	0%	May 31	Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget Affected: through 3.10.9
CVE-2024-5088	5.4	0%	May 18	Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.10.8
CVE-2024-4865	5.4	0%	May 18	Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter Affected: through 3.10.8
CVE-2024-4391	5.4	0%	May 16	Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget Affected: through 3.10.7
CVE-2024-4478	5.4	0%	May 16	Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget Affected: through 3.10.7
CVE-2024-3891	5.4	0%	May 2	Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags Affected: through 3.10.5
CVE-2024-3724	5.4	1%	May 2	Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline Affected: through 3.10.4
CVE-2024-3890	5.4	0%	Apr 26	Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget Affected: through 3.10.6
CVE-2024-1498	5.4	1%	Apr 9	Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget Affected: through 3.10.3
CVE-2024-2787	5.4	0%	Apr 9	Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag Affected: through 3.10.4
CVE-2024-2789	5.4	0%	Apr 9	Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy Affected: through 3.10.4
CVE-2024-2788	5.4	0%	Apr 9	Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag Affected: through 3.10.4
CVE-2024-2786	5.4	0%	Apr 9	Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag Affected: through 3.10.4
CVE-2024-1377	5.4	0%	Mar 7	Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget Affected: through 3.10.3
CVE-2024-1366	5.4	0%	Mar 7	Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget Affected: through 3.10.3
CVE-2024-0838	5.4	0%	Feb 20	Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.10.1
CVE-2024-0438	5.4	1%	Feb 20	Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.10.1
CVE-2024-8801	4.3	0%	Sep 24	Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure Affected: through 3.12.2
CVE-2024-1387	4.3	1%	Apr 9	Happy Addons for Elementor <= 3.10.4 - Incorrect Authorization to Information Exposure Affected: through 3.10.4