Happy Addons for Elementor
- Software type
- Other
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, Happy Addons for Elementor recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Happy Addons for Elementor and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-2918Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template ConditionsCVE-2026-2917Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' ParameterCVE-2026-1210Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta FieldCVE-2025-14635Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JSCVE-2024-12852Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-2918Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions | Exploitation statusNot exploited | FixYes |
| Published03/11/2026 |
| SeverityMedium |
CVE-2026-2917Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter | Exploitation statusNot exploited | FixYes | Published03/11/2026 | SeverityMedium |
|---|
CVE-2026-1210Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field | Exploitation statusNot exploited | FixYes | Published02/03/2026 | SeverityMedium |
|---|
CVE-2025-14635Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS | Exploitation statusNot exploited | FixYes | Published12/23/2025 | SeverityMedium |
|---|
CVE-2024-12852Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Published01/08/2025 | SeverityMedium |
|---|
CVE-2024-10538Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison | Exploitation statusNot exploited | FixYes | Published11/12/2024 | SeverityMedium |
|---|
CVE-2024-8801Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure | Exploitation statusNot exploited | FixYes | Published09/24/2024 | SeverityMedium |
|---|
CVE-2024-6627Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget | Exploitation statusNot exploited | FixYes | Published07/27/2024 | SeverityMedium |
|---|
CVE-2024-5790Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget | Exploitation statusNot exploited | FixYes | Published06/29/2024 | SeverityMedium |
|---|
CVE-2024-5347Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget | Exploitation statusNot exploited | FixYes | Published05/31/2024 | SeverityMedium |
|---|
CVE-2024-5041Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion | Exploitation statusNot exploited | FixYes | Published05/31/2024 | SeverityMedium |
|---|
CVE-2024-5088Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Published05/18/2024 | SeverityMedium |
|---|
CVE-2024-4865Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter | Exploitation statusNot exploited | FixYes | Published05/18/2024 | SeverityMedium |
|---|
CVE-2024-4478Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget | Exploitation statusNot exploited | FixYes | Published05/16/2024 | SeverityMedium |
|---|
CVE-2024-4391Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget | Exploitation statusNot exploited | FixYes | Published05/16/2024 | SeverityMedium |
|---|
CVE-2024-3891Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags | Exploitation statusNot exploited | FixYes | Published05/02/2024 | SeverityMedium |
|---|
CVE-2024-3724Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline | Exploitation statusNot exploited | FixYes | Published05/02/2024 | SeverityMedium |
|---|
CVE-2024-3890Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget | Exploitation statusNot exploited | FixYes | Published04/26/2024 | SeverityMedium |
|---|
CVE-2024-2789Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy | Exploitation statusNot exploited | FixYes | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-2788Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag | Exploitation statusNot exploited | FixYes | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-2787Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag | Exploitation statusNot exploited | FixYes | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-2786Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag | Exploitation statusNot exploited | FixYes | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-1498Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget | Exploitation statusNot exploited | FixYes | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-1387Happy Addons for Elementor <= 3.10.4 - Incorrect Authorization to Information Exposure | Exploitation statusNot exploited | FixYes | Published04/09/2024 | SeverityMedium |
|---|
CVE-2024-1377Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget | Exploitation statusNot exploited | FixYes | Published03/07/2024 | SeverityMedium |
|---|
CVE-2024-1366Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget | Exploitation statusNot exploited | FixYes | Published03/07/2024 | SeverityMedium |
|---|
CVE-2024-0838Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Published02/20/2024 | SeverityMedium |
|---|
CVE-2024-0438Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Published02/20/2024 | SeverityMedium |
|---|
CVE-2023-6632Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Published01/11/2024 | SeverityMedium |
|---|
29 Results | Page 1 of 1