HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates

Güvenlik açıkları

• CVE-2023-28989kimlik doğrulamasız · tıklama gerekir≤ 3.8.2

  WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2024-48045giriş gerekir≤ 3.12.3

  WordPress Happy Elementor Addons plugin <= 3.12.3 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2024-24833giriş gerekir≤ 3.10.1

  WordPress Happy Addons for Elementor plugin <= 3.10.1 - Broken Access Control on Post Clone vulnerability

  Yüksek 8.8

• CVE-2025-68999giriş gerekir≤ 3.20.4

  WordPress Happy Addons for Elementor plugin <= 3.20.4 - SQL Injection vulnerability

  Yüksek 8.5

• CVE-2025-30766giriş gerekir≤ 3.16.2

  WordPress Happy Addons for Elementor plugin <= 3.16.2 - Cross Site Scripting (XSS) Vulnerability

  Orta 6.5

• CVE-2023-51676giriş gerekir≤ 3.9.1.1

  WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF)

  Orta 6.5

• CVE-2026-62080katılımcı+≤ 3.23.1

  WordPress Happy Addons for Elementor plugin <= 3.23.1 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-2918katılımcı+≤ 3.21.0

  Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions

  Orta 6.4

• CVE-2026-1210katılımcı+≤ 3.20.7

  Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field

  Orta 6.4

• CVE-2025-14635katılımcı+≤ 3.20.3

  Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS

  Orta 6.4

• CVE-2023-6632kimlik doğrulamasız · tıklama gerekir≤ 3.9.1.1

  Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2024-47357giriş gerekir≤ 3.12.0

  WordPress Happy Addons for Elementor plugin <= 3.12.0 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-32698giriş gerekir≤ 3.10.4

  WordPress Happy Addons for Elementor plugin <= 3.10.4 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-29108giriş gerekir≤ 3.10.1

  WordPress Happy Addons for Elementor plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2026-2917katılımcı+≤ 3.21.0

  Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter

  Orta 5.4

• CVE-2024-12852katılımcı+≤ 3.15.1

  Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-10538katılımcı+≤ 3.12.5

  Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison

  Orta 5.4

• CVE-2024-6627katılımcı+≤ 3.11.2

  Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget

  Orta 5.4

• CVE-2024-5790katılımcı+≤ 3.11.1

  Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget

  Orta 5.4

• CVE-2024-5347katılımcı+≤ 3.10.9

  Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget

  Orta 5.4

• CVE-2024-5041katılımcı+≤ 3.10.9

  Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion

  Orta 5.4

• CVE-2024-5088katılımcı+≤ 3.10.8

  Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-4865katılımcı+≤ 3.10.8

  Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter

  Orta 5.4

• CVE-2024-4391katılımcı+≤ 3.10.7

  Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widge

  Orta 5.4

• CVE-2024-4478katılımcı+≤ 3.10.7

  Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget

  Orta 5.4

• CVE-2024-3891katılımcı+≤ 3.10.5

  Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags

  Orta 5.4

• CVE-2024-3724katılımcı+≤ 3.10.4

  Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline

  Orta 5.4

• CVE-2024-3890katılımcı+≤ 3.10.6

  Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget

  Orta 5.4

• CVE-2024-2789katılımcı+≤ 3.10.4

  Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy

  Orta 5.4

• CVE-2024-2788katılımcı+≤ 3.10.4

  Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag

  Orta 5.4

• CVE-2024-2787katılımcı+≤ 3.10.4

  Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag

  Orta 5.4

• CVE-2024-2786katılımcı+≤ 3.10.4

  Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag

  Orta 5.4

• CVE-2024-1498katılımcı+≤ 3.10.3

  Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget

  Orta 5.4

• CVE-2024-1377katılımcı+≤ 3.10.3

  Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget

  Orta 5.4

• CVE-2024-1366katılımcı+≤ 3.10.3

  Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget

  Orta 5.4

• CVE-2024-0838katılımcı+≤ 3.10.1

  Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-0438katılımcı+≤ 3.10.1

  Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2026-25468kimlik doğrulamasız≤ 3.20.8

  WordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerability

  Orta 5.3

• CVE-2025-63077giriş gerekir≤ 3.20.3

  WordPress Happy Addons for Elementor plugin <= 3.20.3 - Broken Access Control vulnerability

  Orta 4.3

• CVE-2024-8801katılımcı+≤ 3.12.2

  Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure

  Orta 4.3

• CVE-2024-1387katılımcı+≤ 3.10.4

  Happy Addons for Elementor <= 3.10.4 - Incorrect Authorization to Information Exposure

  Orta 4.3