Skip to content

Known vulnerabilities in thehappymonster Happy Addons for Elementor

Is your version affected?

CVE Summary Score Published
CVE-2026-2917 The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up… 5.4 Medium Mar 11, 2026
CVE-2026-2918 The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up… 6.4 Medium Mar 11, 2026
CVE-2026-1210 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium Feb 3, 2026
CVE-2025-14635 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium Dec 23, 2025
CVE-2024-5647 Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups… 6.4 Medium Jul 3, 2025
CVE-2024-12852 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_cmc_text'… 6.4 Medium Jan 8, 2025
CVE-2024-10538 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the before_label… 6.4 Medium Nov 12, 2024
CVE-2024-8801 The Happy Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up… 4.3 Medium Sep 24, 2024
CVE-2024-6627 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's PDF… 6.4 Medium Jul 27, 2024
CVE-2024-5790 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute… 6.4 Medium Jun 29, 2024
CVE-2024-5041 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium May 31, 2024
CVE-2024-5347 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'arrow'… 6.4 Medium May 31, 2024
CVE-2024-5088 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter… 6.4 Medium May 18, 2024
CVE-2024-4865 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter… 6.4 Medium May 18, 2024
CVE-2024-4391 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium May 16, 2024
CVE-2024-4478 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack… 6.4 Medium May 16, 2024
CVE-2024-3891 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML tags in… 6.4 Medium May 2, 2024
CVE-2024-3724 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium May 2, 2024
CVE-2024-3890 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Calendly widget… 6.4 Medium Apr 26, 2024
CVE-2024-1498 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium Apr 9, 2024
CVE-2024-2787 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title HTML… 6.4 Medium Apr 9, 2024
CVE-2024-2789 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium Apr 9, 2024
CVE-2024-1387 The Happy Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to insufficient… 4.3 Medium Apr 9, 2024
CVE-2024-2788 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Title HTML… 6.4 Medium Apr 9, 2024
CVE-2024-2786 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets… 5.4 Medium Apr 9, 2024

Other thehappymonster products