HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates

Уязвимости

• CVE-2023-28989без авторизации · нужен клик≤ 3.8.2

  WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2024-48045нужен вход≤ 3.12.3

  WordPress Happy Elementor Addons plugin <= 3.12.3 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2024-24833нужен вход≤ 3.10.1

  WordPress Happy Addons for Elementor plugin <= 3.10.1 - Broken Access Control on Post Clone vulnerability

  Высокий 8.8

• CVE-2025-68999нужен вход≤ 3.20.4

  WordPress Happy Addons for Elementor plugin <= 3.20.4 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2025-30766нужен вход≤ 3.16.2

  WordPress Happy Addons for Elementor plugin <= 3.16.2 - Cross Site Scripting (XSS) Vulnerability

  Средний 6.5

• CVE-2023-51676нужен вход≤ 3.9.1.1

  WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF)

  Средний 6.5

• CVE-2026-62080участник+≤ 3.23.1

  WordPress Happy Addons for Elementor plugin <= 3.23.1 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-2918участник+≤ 3.21.0

  Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions

  Средний 6.4

• CVE-2026-1210участник+≤ 3.20.7

  Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field

  Средний 6.4

• CVE-2025-14635участник+≤ 3.20.3

  Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS

  Средний 6.4

• CVE-2023-6632без авторизации · нужен клик≤ 3.9.1.1

  Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2024-47357нужен вход≤ 3.12.0

  WordPress Happy Addons for Elementor plugin <= 3.12.0 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2024-32698нужен вход≤ 3.10.4

  WordPress Happy Addons for Elementor plugin <= 3.10.4 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2024-29108нужен вход≤ 3.10.1

  WordPress Happy Addons for Elementor plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2026-2917участник+≤ 3.21.0

  Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter

  Средний 5.4

• CVE-2024-12852участник+≤ 3.15.1

  Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-10538участник+≤ 3.12.5

  Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison

  Средний 5.4

• CVE-2024-6627участник+≤ 3.11.2

  Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget

  Средний 5.4

• CVE-2024-5790участник+≤ 3.11.1

  Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget

  Средний 5.4

• CVE-2024-5347участник+≤ 3.10.9

  Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget

  Средний 5.4

• CVE-2024-5041участник+≤ 3.10.9

  Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion

  Средний 5.4

• CVE-2024-5088участник+≤ 3.10.8

  Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-4865участник+≤ 3.10.8

  Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter

  Средний 5.4

• CVE-2024-4391участник+≤ 3.10.7

  Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widge

  Средний 5.4

• CVE-2024-4478участник+≤ 3.10.7

  Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget

  Средний 5.4

• CVE-2024-3891участник+≤ 3.10.5

  Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags

  Средний 5.4

• CVE-2024-3724участник+≤ 3.10.4

  Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline

  Средний 5.4

• CVE-2024-3890участник+≤ 3.10.6

  Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget

  Средний 5.4

• CVE-2024-2789участник+≤ 3.10.4

  Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy

  Средний 5.4

• CVE-2024-2788участник+≤ 3.10.4

  Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag

  Средний 5.4

• CVE-2024-2787участник+≤ 3.10.4

  Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag

  Средний 5.4

• CVE-2024-2786участник+≤ 3.10.4

  Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag

  Средний 5.4

• CVE-2024-1498участник+≤ 3.10.3

  Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget

  Средний 5.4

• CVE-2024-1377участник+≤ 3.10.3

  Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget

  Средний 5.4

• CVE-2024-1366участник+≤ 3.10.3

  Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget

  Средний 5.4

• CVE-2024-0838участник+≤ 3.10.1

  Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-0438участник+≤ 3.10.1

  Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2026-25468без авторизации≤ 3.20.8

  WordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerability

  Средний 5.3

• CVE-2025-63077нужен вход≤ 3.20.3

  WordPress Happy Addons for Elementor plugin <= 3.20.3 - Broken Access Control vulnerability

  Средний 4.3

• CVE-2024-8801участник+≤ 3.12.2

  Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure

  Средний 4.3

• CVE-2024-1387участник+≤ 3.10.4

  Happy Addons for Elementor <= 3.10.4 - Incorrect Authorization to Information Exposure

  Средний 4.3