WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
happy-elementor-addons
Published
2026-03-10
Title
Happy Addons for Elementor < 3.21.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter
Slug
happy-elementor-addons
Published
2026-05-07
Title
Happy Addons for Elementor < 3.21.0 - Unauthenticated Information Exposure
Slug
happy-elementor-addons
Published
2026-09-30
Title
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates < 3.50.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
happy-elementor-addons
Published
2026-10-07
Title
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates < 3.50.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
happy-elementor-addons
Published
2026-09-21
Title
Happy Addons for Elementor < 3.50.0 - Contributor+ Stored XSS via Creative Button Widget
Slug
happy-elementor-addons
Published
2026-10-29
Title
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates < 3.51.0 - Missing Authorization
Slug
happy-elementor-addons
Published
2026-10-29
Title
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates < 3.51.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
happy-elementor-addons-pro
Published
2021-04-26
Title
Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS
Slug
happy-elementor-addons-pro
Published
2023-08-29
Title
Happy Elementor Addons Pro < 2.8.1 - Reflected XSS
Slug
happy-elementor-addons-pro
Published
2024-01-05
Title
Happy Addons for Elementor (Free < 3.10.0, Pro < 2.10.0) - Reflected Cross-Site Scripting
Slug
happy-helpdesk-support-ticket-system
Published
2025-08-19
Title
HAPPY – Helpdesk Support Ticket System < 1.0.7 - Missing Authorization
Slug
happy-helpdesk-support-ticket-system
Published
2025-10-25
Title
HAPPY < 1.0.8 - Unauthenticated Remote Code Execution
Slug
happy-helpdesk-support-ticket-system
Published
2025-12-12
Title
HAPPY – Helpdesk Support Ticket System < 1.0.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Reply
Slug
happy-helpdesk-support-ticket-system
Published
2025-12-23
Title
HAPPY < 1.0.10 - Missing Authorization
Slug
happy-helpdesk-support-ticket-system
Published
2026-01-27
Title
HAPPY < 1.0.9 - Missing Authorization
Slug
happy-helpdesk-support-ticket-system
Published
2026-04-16
Title
HAPPY – Helpdesk Support Ticket System < 1.0.11 - Missing Authorization
Slug
happy-scss-compiler
Published
2024-07-08
Title
Happy SCSS Compiler - Compile SCSS to CSS automatically <= 1.3.10 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
happyforms
Published
2023-01-13
Title
Happyforms < 1.22.0 - Contributor+ Stored XSS
Slug
happyforms
Published
2023-11-27
Title
Happyforms < 1.25.10 - Reflected Cross-Site Scripting
Slug
happyforms
Published
2024-01-31
Title
Happyforms < 1.25.11 - Missing Authorization
Slug
happyforms
Published
2024-08-29
Title
Happyforms < 1.26.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
happyforms
Published
2024-10-16
Title
Happyforms < 1.26.3 - Admin+ Stored XSS
Slug
happyforms
Published
2026-06-04
Title
Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms < 1.26.14 - Unauthenticated PHP Object Injection
Slug
happyforms
Published
2026-07-09
Title
HappyForms < 1.26.13 - Authenticated (Admin+) Local File Inclusion
Slug
happyforms
Published
2026-09-24
Title
Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms < 1.26.16 - Unauthenticated Stored Cross-Site Scripting