CVE-2023-28989 Cross-Site Request Forgery (CSRF) vulnerability in weDevs Happy Addons for Elementor plugin <= 3.8.2 versions

Description

Cross-Site Request Forgery (CSRF) vulnerability in weDevs Happy Addons for Elementor plugin <= 3.8.2 versions.

Affected products and versions

Product	Affected versions	Fixed in
Happy Addons for Elementor 3.8	earliest → 3.8.2	No fix stated

Other CVEs of Happy Addons for Elementor

The 6 CVEs of Happy Addons for Elementor →

CVE-2026-109891 Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting… 6.4 Medium CVE-2026-116850 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy… 6.5 Medium CVE-2026-104393 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy… 6.5 Medium CVE-2026-25468 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for… 5.3 Medium