Skip to content
Sign in
5.4 Medium

CVE-2024-2786 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets…

Description

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output escaping on the title_tag attribute. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Affected products and versions

Product Affected versions Fixed in
Happy Addons for Elementor 3.10 earliest → 3.10.4 No fix stated

Other CVEs of Happy Addons for Elementor

The 30 CVEs of Happy Addons for Elementor →
CVE-2026-2917 The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up… 5.4 Medium CVE-2026-2918 The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up… 6.4 Medium CVE-2026-1210 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium CVE-2025-14635 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium
Track this CVE