en
HappyMonster is a WordPress software team and technical design group focused on themes, plugins, and Elementor-related widgets. Its core work is to make website creation and page-builder workflows easier for developers, designers, and agencies. HappyMonster operates within the broader WordPress ecosystem and is associated with the HappyAddons project, developed in cooperation with weDevs.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-2918Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template ConditionsCVE-2026-2917Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' ParameterCVE-2026-1210Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta FieldCVE-2025-14635Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JSCVE-2024-12852Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-2918Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions | Exploitation statusNot exploited | FixYes |
| Affected productHappy Addons for Elementor |
| Published03/11/2026 |
| SeverityMedium |
CVE-2026-2917Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published03/11/2026 | SeverityMedium |
|---|
CVE-2026-1210Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published02/03/2026 | SeverityMedium |
|---|
CVE-2025-14635Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published12/23/2025 | SeverityMedium |
|---|
CVE-2024-12852Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published01/08/2025 | SeverityMedium |
|---|
CVE-2024-10538Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published11/12/2024 | SeverityMedium |
|---|
CVE-2024-8801Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published09/24/2024 | SeverityMedium |
|---|
CVE-2024-6627Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published07/27/2024 | SeverityMedium |
|---|
CVE-2024-5790Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published06/29/2024 | SeverityMedium |
|---|
CVE-2024-5347Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published05/31/2024 | SeverityMedium |
|---|
CVE-2024-5041Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published05/31/2024 | SeverityMedium |
|---|
CVE-2024-5088Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published05/18/2024 | SeverityMedium |
|---|
CVE-2024-4865Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published05/18/2024 | SeverityMedium |
|---|
CVE-2024-4478Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published05/16/2024 | SeverityMedium |
|---|
CVE-2024-4391Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published05/16/2024 | SeverityMedium |
|---|
CVE-2024-3891Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published05/02/2024 | SeverityMedium |
|---|
CVE-2024-3724Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published05/02/2024 | SeverityMedium |
|---|
CVE-2024-3890Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published04/26/2024 | SeverityMedium |
|---|
CVE-2024-2789Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-2788Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-2787Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-2786Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-1498Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-1387Happy Addons for Elementor <= 3.10.4 - Incorrect Authorization to Information Exposure | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-1377Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published03/07/2024 | SeverityMedium |
|---|
CVE-2024-1366Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published03/07/2024 | SeverityMedium |
|---|
CVE-2024-0838Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published02/20/2024 | SeverityMedium |
|---|
CVE-2024-0438Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published02/20/2024 | SeverityMedium |
|---|
CVE-2023-6632Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productHappy Addons for Elementor | Published01/11/2024 | SeverityMedium |
|---|
29 Results | Page 1 of 1