Happy Addons For Elementor
Approved changes feed: RSS · Atom
cpe:2.3:a:wedevs:happy_addons_for_elementor:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Wedevs (74af2ef9-c755-5b07-93a2-5a3afa051904) |
|---|---|
| Product | Happy Addons For Elementor (d6cd1f14-db18-591d-b6f1-2f8e635bb04d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8801 |
vulnerable | 2026-06-03 14:58:19.556303 |
Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure
MEDIUM (4.3)
The Happy Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.2 via the Content Switcher widget. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including private, draft, and pending Elementor templates.
Published: 2024-09-24T11:00:45.691Z
Updated: 2026-04-08T17:11:53.699Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5790 |
vulnerable | 2026-06-03 14:57:54.233745 |
Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget
MEDIUM (6.4)
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Gradient Heading widget in all versions up to, and including, 3.11.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-06-29T07:05:38.700Z
Updated: 2026-04-08T16:59:21.636Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12852 |
vulnerable | 2026-06-03 14:54:23.288696 |
Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
MEDIUM (6.4)
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_cmc_text' parameter of the Happy Mouse Cursor in all versions up to, and including, 3.15.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-01-08T06:41:38.203Z
Updated: 2026-04-08T17:30:00.793Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6632 |
vulnerable | 2026-06-03 14:53:58.565993 |
Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting
MEDIUM (6.1)
The Happy Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via DOM in all versions up to and including 3.9.1.1 (versions up to 2.9.1.1 in Happy Addons for Elementor Pro) due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Published: 2024-01-11T08:32:27.224Z
Updated: 2026-04-08T16:33:51.082Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51676 |
vulnerable | 2026-06-03 14:53:38.237691 |
WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF)
MEDIUM (4.9)
Server-Side Request Forgery (SSRF) vulnerability in Leevio Happy Addons for Elementor.This issue affects Happy Addons for Elementor: from n/a through 3.9.1.1.
Published: 2023-12-29T12:44:14.337Z
Updated: 2026-04-28T16:09:04.772Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28989 |
vulnerable | 2026-06-03 14:51:39.231650 |
WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in weDevs Happy Addons for Elementor plugin <= 3.8.2 versions.
Published: 2023-07-10T12:51:07.650Z
Updated: 2026-04-28T16:08:17.142Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.