TH
Vendor
thehappymonster
28
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-2917 | HA Happy Addons for Elementor thehappymonster | 5.4 | Mar 11 | Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter |
| CVE-2026-2918 | HA Happy Addons for Elementor thehappymonster | 6.4 | Mar 11 | Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions |
| CVE-2026-1210 | HA Happy Addons for Elementor thehappymonster | 6.4 | Feb 3 | Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field |
| CVE-2025-14635 | HA Happy Addons for Elementor thehappymonster | 6.4 | Dec 23 | Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS |
| CVE-2024-12852 | HA Happy Addons for Elementor thehappymonster | 5.4 | Jan 8 | Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-10538 | HA Happy Addons for Elementor thehappymonster | 5.4 | Nov 12 | Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison |
| CVE-2024-8801 | HA Happy Addons for Elementor thehappymonster | 4.3 | Sep 24 | Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure |
| CVE-2024-6627 | HA Happy Addons for Elementor thehappymonster | 5.4 | Jul 27 | Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget |
| CVE-2024-5790 | HA Happy Addons for Elementor thehappymonster | 5.4 | Jun 29 | Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget |
| CVE-2024-5041 | HA Happy Addons for Elementor thehappymonster | 5.4 | May 31 | Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion |
| CVE-2024-5347 | HA Happy Addons for Elementor thehappymonster | 5.4 | May 31 | Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget |
| CVE-2024-5088 | HA Happy Addons for Elementor thehappymonster | 5.4 | May 18 | Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-4865 | HA Happy Addons for Elementor thehappymonster | 5.4 | May 18 | Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter |
| CVE-2024-4391 | HA Happy Addons for Elementor thehappymonster | 5.4 | May 16 | Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget |
| CVE-2024-4478 | HA Happy Addons for Elementor thehappymonster | 5.4 | May 16 | Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget |
| CVE-2024-3891 | HA Happy Addons for Elementor thehappymonster | 5.4 | May 2 | Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags |
| CVE-2024-3724 | HA Happy Addons for Elementor thehappymonster | 5.4 | May 2 | Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline |
| CVE-2024-3890 | HA Happy Addons for Elementor thehappymonster | 5.4 | Apr 26 | Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget |
| CVE-2024-1498 | HA Happy Addons for Elementor thehappymonster | 5.4 | Apr 9 | Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget |
| CVE-2024-2787 | HA Happy Addons for Elementor thehappymonster | 5.4 | Apr 9 | Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag |
| CVE-2024-2789 | HA Happy Addons for Elementor thehappymonster | 5.4 | Apr 9 | Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy |
| CVE-2024-1387 | HA Happy Addons for Elementor thehappymonster | 4.3 | Apr 9 | Happy Addons for Elementor <= 3.10.4 - Incorrect Authorization to Information Exposure |
| CVE-2024-2788 | HA Happy Addons for Elementor thehappymonster | 5.4 | Apr 9 | Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag |
| CVE-2024-2786 | HA Happy Addons for Elementor thehappymonster | 5.4 | Apr 9 | Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag |
| CVE-2024-1377 | HA Happy Addons for Elementor thehappymonster | 5.4 | Mar 7 | Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget |
| CVE-2024-1366 | HA Happy Addons for Elementor thehappymonster | 5.4 | Mar 7 | Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget |
| CVE-2024-0838 | HA Happy Addons for Elementor thehappymonster | 5.4 | Feb 20 | Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-0438 | HA Happy Addons for Elementor thehappymonster | 5.4 | Feb 20 | Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting |
