Happy Addons For Elementor
Approved changes feed: RSS · Atom
cpe:2.3:a:wedevs:happy_addons_for_elementor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wedevs (74af2ef9-c755-5b07-93a2-5a3afa051904) |
|---|---|
| Product | Happy Addons For Elementor (d6cd1f14-db18-591d-b6f1-2f8e635bb04d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25468 |
vulnerable | 2026-06-03 15:16:54.664885 |
WordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data.
This issue affects Happy Addons for Elementor: from n/a through 3.20.8.
Published: 2026-05-07T07:37:59.351Z
Updated: 2026-05-07T13:40:21.465Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28989 |
vulnerable | 2026-06-03 14:51:39.229409 |
WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in weDevs Happy Addons for Elementor plugin <= 3.8.2 versions.
Published: 2023-07-10T12:51:07.650Z
Updated: 2026-04-28T16:08:17.142Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24292 |
vulnerable | 2026-06-03 14:43:56.732684 |
Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS
The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting(XSS) by lower-privileged users such as contributors, all via a similar method: The “Card” widget accepts a “title_tag” parameter. Although the element control lists a fixed set of possible html tags, it is possible to send a ‘save_builder’ request with the “heading_tag” set to “script”, and the actual “title” parameter set to JavaScript to be executed within the script tags added by the “heading_tag” parameter.
Published: 2021-05-17T16:48:53.000Z
Updated: 2024-08-03T19:28:23.390Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.