Advisories · Technology

weDevs Happy Addons for Elementor.

Every CVE that names weDevs Happy Addons for Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109891 CVE record

CVSS 6.4 Medium

WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability
- weDevs Happy Addons for Elementor
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-116850 CVE record

CVSS 6.5 Medium

WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability
- weDevs Happy Addons for Elementor
- Cross-site scripting (XSS)
Not analysed yet 29 Oct 2026
CVE-2026-104393 CVE record

CVSS 6.5 Medium

WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability
- weDevs Happy Addons for Elementor
- Cross-site scripting (XSS)
Not analysed yet 7 Oct 2026
CVE-2026-25468 CVE record

CVSS 5.3 Medium

WordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerability
- weDevs Happy Addons for Elementor
- Information disclosure
Not analysed yet 7 May 2026
CVE-2023-28989 CVE record

CVSS 4.3 Medium

WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
- weDevs Happy Addons for Elementor
- Cross-site request forgery (CSRF)
Not analysed yet 10 Jul 2023
CVE-2021-24292 CVE record

Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS
- weDevs Happy Addons for Elementor
- weDevs Happy Addons Pro for Elementor
- Cross-site scripting (XSS)
Not analysed yet 17 May 2021