Skip to content
OpenAdvisories

Vendor

thehappymonster

29 known vulnerabilities.

Products

Happy Addons for Elementor 29
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2026-1210 Public exploit

    Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field

    The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_elementor_data' meta field in all versions up to, and including, 3.20.7 due to insufficient input sanitization and output escaping. This makes it possib…

    thehappymonster Happy Addons for Elementor Web / CMS