Plugin icon

Happy Addons for Elementor

happy-elementor-addons

Vulnerabilities:

35

Last Updated:

December 17, 2025

Active Installs:

400000

Published
Title
Fixed in
CVSS
Published
2025-12-22
Title
Happy Addons for Elementor < 3.20.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
Fixed in
Fixed in 3.20.4
CVSS
6.4 (medium)
Published
2025-12-04
Title
Happy Addons for Elementor < 3.20.4 - Missing Authorization
Fixed in
Fixed in 3.20.4
CVSS
4.3 (medium)
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Fixed in
Fixed in 3.12.3
CVSS
5.9 (medium)
Published
2025-03-27
Title
Happy Addons for Elementor < 3.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.16.3
CVSS
6.4 (medium)
Published
2025-01-07
Title
Happy Addons for Elementor < 3.15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.15.2
CVSS
6.4 (medium)
Published
2024-11-11
Title
Happy Addons for Elementor < 3.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison
Fixed in
Fixed in 3.12.6
CVSS
6.4 (medium)
Published
2024-10-13
Title
Happy Addons for Elementor < 3.12.4 - Missing Authorization
Fixed in
Fixed in 3.12.4
CVSS
5.4 (medium)
Published
2024-09-30
Title
Happy Addons for Elementor < 3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.12.1
CVSS
6.4 (medium)
Published
2024-09-23
Title
Happy Addons for Elementor < 3.12.3 - Authenticated (Contributor+) Sensitive Information Exposure
Fixed in
Fixed in 3.12.3
CVSS
4.3 (medium)
Published
2024-07-26
Title
Happy Addons for Elementor < 3.11.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget
Fixed in
Fixed in 3.11.3
CVSS
6.4 (medium)
Published
2024-06-28
Title
Happy Addons for Elementor < 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget
Fixed in
Fixed in 3.11.2
CVSS
6.4 (medium)
Published
2024-05-30
Title
Happy Addons for Elementor < 3.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget
Fixed in
Fixed in 3.11.0
CVSS
6.4 (medium)
Published
2024-05-30
Title
Happy Addons for Elementor < 3.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion
Fixed in
Fixed in 3.11.0
CVSS
6.4 (medium)
Published
2024-05-17
Title
Happy Addons for Elementor < 3.10.9 - Contributor+ Stored XSS
Fixed in
Fixed in 3.10.9
CVSS
5.9 (medium)
Published
2024-05-15
Title
Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS < 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget
Fixed in
Fixed in 3.10.8
CVSS
6.4 (medium)
Published
2024-05-15
Title
Happy Addons for Elementor < 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget
Fixed in
Fixed in 3.10.8
CVSS
6.4 (medium)
Published
2024-04-25
Title
Happy Addons for Elementor < 3.10.7 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 3.10.7
CVSS
6.4 (medium)
Published
2024-04-19
Title
Happy Addons for Elementor < 3.10.5 - Contributor+ Stored XSS
Fixed in
Fixed in 3.10.5
CVSS
5.9 (medium)
Published
2024-04-19
Title
Happy Addons for Elementor < 3.10.6 - Contributor+ Stored XSS via HTML Tags
Fixed in
Fixed in 3.10.6
CVSS
5.9 (medium)
Published
2024-04-04
Title
Happy Addons for Elementor < 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag
Fixed in
Fixed in 3.10.4
CVSS
5.4 (medium)
Published
2024-04-04
Title
Happy Addons for Elementor < 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy
Fixed in
Fixed in 3.10.5
CVSS
6.4 (medium)
Published
2024-04-04
Title
Happy Addons for Elementor < 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag
Fixed in
Fixed in 3.10.5
CVSS
6.4 (medium)
Published
2024-04-04
Title
Happy Addons for Elementor < 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget
Fixed in
Fixed in 3.10.4
CVSS
6.4 (medium)
Published
2024-04-04
Title
Happy Addons for Elementor < 3.10.5 - Incorrect Authorization to Information Exposure
Fixed in
Fixed in 3.10.5
CVSS
4.3 (medium)
Published
2024-04-04
Title
Happy Addons for Elementor < 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag
Fixed in
Fixed in 3.10.5
CVSS
5.5 (medium)
Published
2024-03-06
Title
Happy Addons for Elementor < 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget
Fixed in
Fixed in 3.10.4
CVSS
6.4 (medium)
Published
2024-03-06
Title
Happy Addons for Elementor < 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget
Fixed in
Fixed in 3.10.4
CVSS
6.4 (medium)
Published
2024-02-13
Title
Happy Addons for Elementor < 3.10.2 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 3.10.2
CVSS
6.8 (medium)
Published
2024-02-13
Title
Happy Addons for Elementor < 3.10.2 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 3.10.2
CVSS
6.8 (medium)
Published
2024-02-02
Title
Happy Addons for Elementor < 3.10.2 - Missing Authorization via add_row_actions
Fixed in
Fixed in 3.10.2
CVSS
4.3 (medium)
Published
2024-01-09
Title
Happy Elementor Addons < 3.10.1 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 3.10.1
CVSS
6.4 (medium)
Published
2024-01-05
Title
Happy Addons for Elementor (Free < 3.10.0, Pro < 2.10.0) - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.10.0
CVSS
7.1 (high)
Published
2023-12-27
Title
Happy Addons for Elementor < 3.10.0 - Contributor+ SSRF
Fixed in
Fixed in 3.10.0
CVSS
3.8 (low)
Published
2023-03-29
Title
Happy Addons for Elementor < 3.8.3 - Cross-Site Request Forgery
Fixed in
Fixed in 3.8.3
CVSS
4.3 (medium)
Published
2021-04-26
Title
Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS
Fixed in
Fixed in 2.24.0
CVSS
6.8 (medium)