Vulnerabilities

TI-2024-11911 CVE-2024-12852 · GHSA-vcww-vw4j-8mjc

Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_cmc_text' parameter of the Happy Mouse Cursor in all versions up to, and including, 3.15.1 due to insufficient…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00302 Published 2025-01-08 No fix listed CWE-79

TI-2024-08167 CVE-2024-8801 · GHSA-gr7q-37gq-cg24

Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure

LOW 20

The Happy Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.2 via the Content Switcher widget.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00414 Published 2024-09-24 No fix listed CWE-200

TI-2024-05369 CVE-2024-5790 · GHSA-rv9m-cr53-rp67

Cross-site scripting in thehappymonster Happy Addons for Elementor

LOW 28

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Gradient Heading widget in all versions up to, and including, 3.11.1 due to ins…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00329 Published 2024-06-29 No fix listed CWE-79

TI-2023-06078 CVE-2023-6632 · GHSA-7fj6-ch6w-c47g

Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting

LOW 28

The Happy Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via DOM in all versions up to and including 3.9.1.1 (versions up to 2.9.1.1 in Happy Addons for Elementor Pro) due to in…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00544 Published 2024-01-11 No fix listed CWE-79

TI-2023-28323 CVE-2023-51676 · GHSA-hcpm-pqvq-j99m

WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF)

LOW 29

Server-Side Request Forgery (SSRF) vulnerability in Leevio Happy Addons for Elementor.This issue affects Happy Addons for Elementor: from n/a through 3.9.1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00306 Published 2023-12-29 No fix listed CWE-918

TI-2023-21845 CVE-2023-41236 · GHSA-73f7-qjrv-8jp6

WordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Happy addons Happy Elementor Addons Pro plugin <= 2.8.0 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00411 Published 2023-09-27 No fix listed CWE-79

TI-2023-13451 CVE-2023-28989 · GHSA-xcmc-r5gr-ffh3

WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in weDevs Happy Addons for Elementor plugin <= 3.8.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2023-07-10 No fix listed CWE-352

TI-2021-06584 CVE-2021-24292 · GHSA-fvmw-j93h-3272

Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS

LOW 25

The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting(XSS) by lower-privi…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00636 Published 2021-05-17 Fixed in 2.24.0, 1.17.0 CWE-79

Vulnerabilities

Filters