Happy Addons for Elementor vulnerabilities | LiveThreat CVE Feed

Product

Happy Addons for Elementor

by leevio · last CVE Sep 30, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 0High 2Medium 27Low 0

Severity

All severities29 Critical0 High2 Medium27 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Happy Addons for Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-48045	8.8	0%	Nov 1	WordPress Happy Elementor Addons plugin <= 3.12.3 - Broken Access Control vulnerability Affected: before 3.12.4
CVE-2024-24833	8.8	0%	May 8	WordPress Happy Addons for Elementor plugin <= 3.10.1 - Broken Access Control on Post Clone vulnerability Affected: through 3.10.1
CVE-2026-62080	6.5	0%	Sep 30	WordPress Happy Addons for Elementor plugin <= 3.23.1 - Cross Site Scripting (XSS) vulnerability Affected: through 3.23.1
CVE-2023-51676	6.5	0%	Dec 29	WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF) Affected: through 3.9.1.1
CVE-2024-5647	6.4	0%	Jul 3	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library Affected: through 3.12.2
CVE-2024-10538	5.4	0%	Nov 12	Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Affected: before 3.12.6
CVE-2024-47357	5.4	0%	Oct 6	WordPress Happy Addons for Elementor plugin <= 3.12.0 - Cross Site Scripting (XSS) vulnerability Affected: through 3.12.0
CVE-2024-6627	5.4	0%	Jul 27	Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget Affected: through 3.11.2
CVE-2024-5041	5.4	0%	May 31	Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Affected: through 3.10.9
CVE-2024-5347	5.4	0%	May 31	Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget Affected: before 3.11.0
CVE-2024-5088	5.4	0%	May 18	Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.10.8
CVE-2024-4865	5.4	0%	May 18	Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter Affected: through 3.10.8
CVE-2024-4391	5.4	0%	May 16	Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget Affected: through 3.10.7
CVE-2024-4478	5.4	0%	May 16	Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget Affected: through 3.10.7
CVE-2024-3891	5.4	0%	May 2	Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags Affected: through 3.10.5
CVE-2024-3724	5.4	1%	May 2	Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline Affected: through 3.10.4
CVE-2024-3890	5.4	0%	Apr 26	Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget Affected: through 3.10.5
CVE-2024-32698	5.4	0%	Apr 22	WordPress Happy Addons for Elementor plugin <= 3.10.4 - Cross Site Scripting (XSS) vulnerability Affected: through 3.10.4
CVE-2024-1498	5.4	1%	Apr 9	Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget Affected: through 3.10.3
CVE-2024-2787	5.4	0%	Apr 9	Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag Affected: through 3.10.4
CVE-2024-2789	5.4	0%	Apr 9	Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy Affected: through 3.10.4
CVE-2024-2788	5.4	0%	Apr 9	Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag Affected: through 3.10.4
CVE-2024-2786	5.4	0%	Apr 9	Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag Affected: through 3.10.4
CVE-2024-29108	5.4	0%	Mar 19	WordPress Happy Addons for Elementor plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability Affected: through 3.10.1
CVE-2024-1377	5.4	0%	Mar 7	Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget Affected: through 3.10.3
CVE-2024-1366	5.4	0%	Mar 7	Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget Affected: through 3.10.3
CVE-2024-0838	5.4	0%	Feb 20	Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.10.2
CVE-2024-0438	5.4	1%	Feb 20	Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 3.10.2
CVE-2024-1387	4.3	1%	Apr 9	Happy Addons for Elementor <= 3.10.4 - Incorrect Authorization to Information Exposure Affected: through 3.10.4