thehappymonster Happy Addons for Elementor

• CVE-2026-2917 Medium 5.4 Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter 0.2%
• CVE-2026-2918 Medium 6.4 Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions 0.2%
• CVE-2026-1210 Medium 6.4 Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field 0.3%
• CVE-2025-14635 Medium 6.4 Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS 0.3%
• CVE-2024-12852 Medium 6.4 Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-10538 Medium 6.4 Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison 0.3%
• CVE-2024-8801 Medium 4.3 Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure 0.4%
• CVE-2024-6627 Medium 6.4 Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget 0.3%
• CVE-2024-5790 Medium 6.4 Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget 0.3%
• CVE-2024-5041 Medium 6.4 Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion 0.3%
• CVE-2024-5347 Medium 6.4 Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget 0.3%
• CVE-2024-5088 Medium 6.4 Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2024-4865 Medium 6.4 Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter 0.4%
• CVE-2024-4391 Medium 6.4 Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget 0.3%
• CVE-2024-4478 Medium 6.4 Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget 0.3%
• CVE-2024-3891 Medium 6.4 Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags 0.4%
• CVE-2024-3724 Medium 6.4 Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline 0.5%
• CVE-2024-3890 Medium 6.4 Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget 0.3%
• CVE-2024-1498 Medium 6.4 Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget 0.5%
• CVE-2024-2787 Medium 6.4 Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag 0.3%
• CVE-2024-2789 Medium 6.4 Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy 0.3%
• CVE-2024-1387 Medium 4.3 Happy Addons for Elementor <= 3.10.4 - Incorrect Authorization to Information Exposure 0.6%
• CVE-2024-2788 Medium 6.4 Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag 0.4%
• CVE-2024-2786 Medium 5.4 Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag 0.5%
• CVE-2024-1377 Medium 6.4 Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget 0.4%
• CVE-2024-1366 Medium 6.4 Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget 0.4%
• CVE-2024-0838 Medium 6.4 Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.5%
• CVE-2024-0438 Medium 6.4 Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.6%
• CVE-2023-6632 Medium 6.1 Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting 0.5%