Happy Addons for Elementor vulnerabilities | LiveThreat CVE Feed

Product

Happy Addons for Elementor

by weDevs · last CVE Oct 29, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 0High 1Medium 12Low 0

Severity

All severities13 Critical0 High1 Medium12 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Happy Addons for Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-116850 New	6.5	–	Oct 29	WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability Affected: through 3.50.1
CVE-2026-104393	6.5	0%	Oct 7	WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability Affected: through 3.50.0
CVE-2023-51676	6.5	0%	Dec 29	WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF) Affected: through 3.9.1.1
CVE-2026-109891 New	6.4	–	Oct 29	WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability Affected: through 3.50.1
CVE-2023-6632	6.1	1%	Jan 11	Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting Affected: before 3.10.0; before 2.10.0
CVE-2023-41236	6.1	0%	Sep 27	WordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS) Affected: through 2.8.0
CVE-2024-12852	5.4	0%	Jan 8	Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 3.15.2
CVE-2024-5790	5.4	0%	Jun 29	Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget Affected: before 3.11.2
CVE-2024-2787	5.4	0%	Apr 9	Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag Affected: through 3.10.4
CVE-2021-24292	5.4	1%	May 17	The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored… Affected: before 1.17.0; before 2.24.0
CVE-2026-25468	5.3	0%	May 7	WordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerability Affected: through 3.20.8
CVE-2024-8801	4.3	0%	Sep 24	Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure Affected: before 3.12.3