Wedevs Happy Addons For Elementor — known CVE vulnerabilities

Every CVE whose affected-product data names Wedevs Happy Addons For Elementor, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2023-41236 — CVSS 7.1 (high): Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Happy addons Happy Elementor Addons Pro plugin <= 2.8.0 versions.
• CVE-2024-5790 — CVSS 6.4 (medium): The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the…
• CVE-2024-12852 — CVSS 6.4 (medium): The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_cmc_text' parameter of the…
• CVE-2023-6632 — CVSS 6.1 (medium): The Happy Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via DOM in all versions up to and…
• CVE-2021-24292 — CVSS 5.4 (medium): The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number…
• CVE-2023-51676 — CVSS 4.9 (medium): Server-Side Request Forgery (SSRF) vulnerability in Leevio Happy Addons for Elementor.This issue affects Happy Addons for Elementor: from…
• CVE-2023-28989 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in weDevs Happy Addons for Elementor plugin <= 3.8.2 versions.
• CVE-2024-8801 — CVSS 4.3 (medium): The Happy Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including…