Happy Addons for Elementor

Vulnerabilities 45Slug happy-elementor-addonsLatest version 3.21.4WordPress.org →

Minimum safe version

3.21.1

Update to 3.21.1 or later to address 45 fixable vulnerabilities

Latest available3.21.4
N/A
2026-02-02< 3.20.8

Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field

N/A
2026-03-10< 3.21.1

Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions

N/A
2026-03-10< 3.21.1

Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter

High 8.5
2026-01-23< 3.20.6

Happy Addons for Elementor <= 3.20.4 - Authenticated (Contributor+) SQL Injection

Medium 6.4
2025-07-03< 3.12.3

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library

Medium 4.3
2024-09-25< 3.12.3

WordPress Happy Addons for Elementor Plugin <= 3.12.2 is vulnerable to Sensitive Data Exposure

Medium 5.4
2024-07-29< 3.11.3

WordPress Happy Addons for Elementor Plugin <= 3.11.2 is vulnerable to Cross Site Scripting (XSS)

N/A
< 3.10.1

Happy Elementor Addons &lt; 3.10.1 - Contributor+ Stored Cross-Site Scripting

Medium 5.4
2024-07-01< 3.11.2

WordPress Happy Addons for Elementor Plugin <= 3.11.1 is vulnerable to Cross Site Scripting (XSS)

Medium 5.4
2024-05-20< 3.10.9

WordPress Happy Addons for Elementor Plugin <= 3.10.8 is vulnerable to Cross Site Scripting (XSS)

Medium 4.3
2024-04-17< 3.10.5

WordPress Happy Addons for Elementor Plugin <= 3.10.4 is vulnerable to Sensitive Data Exposure

N/A
2024-01-09< 3.10.1

Happy Elementor Addons <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Medium 4.9
2024-12-27< 3.10.0

WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF)

N/A
2023-03-21< 3.8.0

WordPress Happy Addons for Elementor Plugin <= 3.7.2 is vulnerable to Cross Site Request Forgery (CSRF)