Skip to content
Sign in
4.3 Medium

CVE-2024-1387 The Happy Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to insufficient…

Description

The Happy Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to insufficient authorization on the duplicate_thing() function in all versions up to, and including, 3.10.4. This makes it possible for attackers, with contributor-level access and above, to clone arbitrary posts (including private and password protected ones) which may lead to information exposure.

Affected products and versions

Product Affected versions Fixed in
Happy Addons for Elementor 3.10 earliest → 3.10.4 No fix stated

Other CVEs of Happy Addons for Elementor

The 30 CVEs of Happy Addons for Elementor →
CVE-2026-2917 The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up… 5.4 Medium CVE-2026-2918 The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up… 6.4 Medium CVE-2026-1210 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium CVE-2025-14635 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium
Track this CVE