Happy Addons for Elementor

HappyMonster

Developer

3.21.1

Latest version

400,000

Installations

No date

Last updated

WordPress Plugin

Active VDP

Report vulnerability

Vulnerabilities

Security Policy

Security Contributors

Vulnerability history

0 present

40 patched

0 Mitigation rules

Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter vulnerability
<= 3.21.0
10/03/2026
Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions vulnerability
<= 3.21.0
10/03/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field vulnerability
<= 3.20.7
02/02/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget vulnerability
<= 3.10.3
02/02/2026
Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag vulnerability
<= 3.10.4
02/02/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag vulnerability
<= 3.10.4
02/02/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag vulnerability
<= 3.10.4
02/02/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy vulnerability
<= 3.10.4
02/02/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline vulnerability
<= 3.10.4
02/02/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget vulnerability
<= 3.10.7
02/02/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion vulnerability
<= 3.10.9
02/02/2026
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 3.10.8
02/02/2026
SQL Injection vulnerability
<= 3.20.4
23/01/2026
Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library vulnerability
<= 3.12.2
31/12/2025
Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS vulnerability
<= 3.20.3
22/12/2025
Broken Access Control vulnerability
<= 3.20.3
04/12/2025
Cross Site Scripting (XSS) Vulnerability
<= 3.16.2
27/03/2025
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 3.15.1
07/01/2025
Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison vulnerability
<= 3.12.5
12/11/2024
Broken Access Control vulnerability
<= 3.12.3
13/10/2024
Cross Site Scripting (XSS) vulnerability
<= 3.12.0
30/09/2024
Authenticated (Contributor+) Sensitive Information Exposure vulnerability
<= 3.12.2
25/09/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget vulnerability
<= 3.11.2
29/07/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget vulnerability
<= 3.11.1
01/07/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget vulnerability
<= 3.10.9
31/05/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter vulnerability
<= 3.10.8
20/05/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget vulnerability
<= 3.10.7
16/05/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget vulnerability
<= 3.10.6
26/04/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags vulnerability
<= 3.10.5
22/04/2024
Cross Site Scripting (XSS) vulnerability
<= 3.10.4
19/04/2024
Incorrect Authorization to Information Exposure vulnerability
<= 3.10.4
17/04/2024
Cross Site Scripting (XSS) vulnerability
<= 3.10.1
15/03/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget vulnerability
<= 3.10.3
07/03/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget vulnerability
<= 3.10.3
07/03/2024
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 3.10.1
29/02/2024
Broken Access Control on Post Clone vulnerability
<= 3.10.1
02/02/2024
Reflected Cross-Site Scripting vulnerability
<= 3.9.1.1
05/01/2024
Server Side Request Forgery (SSRF) vulnerability
<= 3.9.1.1
27/12/2023
Cross Site Request Forgery (CSRF) vulnerability
<= 3.8.2
29/03/2023
Cross-Site Request Forgery (CSRF) vulnerability
<= 3.7.2
21/03/2023