Skip to content
Thehappymonster vulnerabilities
Newest
-
thehappymonster happy addons for elementor
Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter
CVE-2026-2917
5.4 Medium
-
thehappymonster happy addons for elementor
Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions
CVE-2026-2918
6.4 Medium
-
thehappymonster happy addons for elementor
Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field
CVE-2026-1210
6.4 Medium
-
thehappymonster happy addons for elementor
Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
CVE-2025-14635
6.4 Medium
-
thehappymonster happy addons for elementor
Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-12852
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison
CVE-2024-10538
6.4 Medium
-
thehappymonster happy addons for elementor
Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2024-8801
4.3 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget
CVE-2024-6627
6.4 Medium
-
thehappymonster happy addons for elementor
Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget
CVE-2024-5790
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion
CVE-2024-5041
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget
CVE-2024-5347
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-5088
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter
CVE-2024-4865
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget
CVE-2024-4391
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget
CVE-2024-4478
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
CVE-2024-3891
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline
CVE-2024-3724
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget
CVE-2024-3890
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget
CVE-2024-1498
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag
CVE-2024-2787
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy
CVE-2024-2789
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.4 - Incorrect Authorization to Information Exposure
CVE-2024-1387
4.3 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag
CVE-2024-2788
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag
CVE-2024-2786
5.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget
CVE-2024-1377
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget
CVE-2024-1366
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0838
6.4 Medium
-
leevio happy addons for elementor
Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0438
6.4 Medium
-
thehappymonster happy addons for elementor, wedevs happy addons for elementor pro +1 more
Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting
CVE-2023-6632
6.1 Medium