https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10538.htmlhttps://patchthecve.com/cve/CVE-2024-10538.htmlWed, 17 Jun 2026 06:55:53 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the before_label parameter in the Image Comparison widget in all versions up to, and including, 3.12.5 due to insufficient input sanitization and output escaping. This makes it possible for authentichttps://patchthecve.com/cve/CVE-2024-48045.htmlhttps://patchthecve.com/cve/CVE-2024-48045.htmlWed, 17 Jun 2026 07:58:09 +0000MEDIUM 4.3: Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor: from n/a through <= 3.12.3.https://patchthecve.com/cve/CVE-2024-47357.htmlhttps://patchthecve.com/cve/CVE-2024-47357.htmlWed, 17 Jun 2026 07:56:56 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through <= 3.12.0.https://patchthecve.com/cve/CVE-2024-6627.htmlhttps://patchthecve.com/cve/CVE-2024-6627.htmlWed, 17 Jun 2026 08:18:22 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's PDF View widget in all versions up to, and including, 3.11.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticahttps://patchthecve.com/cve/CVE-2024-5347.htmlhttps://patchthecve.com/cve/CVE-2024-5347.htmlWed, 17 Jun 2026 08:15:44 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'arrow' attribute within the plugin's Post Navigation widget in all versions up to, and including, 3.10.9 due to insufficient input sanitization and output escaping on user supplied attributes. Thttps://patchthecve.com/cve/CVE-2024-5041.htmlhttps://patchthecve.com/cve/CVE-2024-5041.htmlWed, 17 Jun 2026 08:14:57 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ha-ia-content-button’ parameter in all versions up to, and including, 3.10.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with https://patchthecve.com/cve/CVE-2024-5088.htmlhttps://patchthecve.com/cve/CVE-2024-5088.htmlWed, 17 Jun 2026 08:15:09 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and including, 3.10.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-levelhttps://patchthecve.com/cve/CVE-2024-4865.htmlhttps://patchthecve.com/cve/CVE-2024-4865.htmlWed, 17 Jun 2026 08:03:03 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and including, 3.10.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-levelhttps://patchthecve.com/cve/CVE-2024-4391.htmlhttps://patchthecve.com/cve/CVE-2024-4391.htmlWed, 17 Jun 2026 08:01:48 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Event Calendar widget in all versions up to, and including, 3.10.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authhttps://patchthecve.com/cve/CVE-2024-4478.htmlhttps://patchthecve.com/cve/CVE-2024-4478.htmlWed, 17 Jun 2026 08:01:57 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack Group widget in all versions up to, and including, 3.10.7 due to insufficient input sanitization and output escaping on user supplied 'tooltip_position' attribute. This makes it possihttps://patchthecve.com/cve/CVE-2024-24833.htmlhttps://patchthecve.com/cve/CVE-2024-24833.htmlWed, 17 Jun 2026 07:14:58 +0000MEDIUM 4.3: Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons.This issue affects Happy Addons for Elementor: from n/a through <= 3.10.1.https://patchthecve.com/cve/CVE-2024-3891.htmlhttps://patchthecve.com/cve/CVE-2024-3891.htmlWed, 17 Jun 2026 07:45:24 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML tags in widgets in all versions up to, and including, 3.10.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attahttps://patchthecve.com/cve/CVE-2024-3724.htmlhttps://patchthecve.com/cve/CVE-2024-3724.htmlWed, 17 Jun 2026 07:44:52 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Stack Group, Photo Stack, & Horizontal Timeline widgets in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output escaping on user supplied atthttps://patchthecve.com/cve/CVE-2024-3890.htmlhttps://patchthecve.com/cve/CVE-2024-3890.htmlWed, 17 Jun 2026 07:45:24 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Calendly widget in all versions up to, and including, 3.10.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attachttps://patchthecve.com/cve/CVE-2024-32698.htmlhttps://patchthecve.com/cve/CVE-2024-32698.htmlWed, 17 Jun 2026 07:30:15 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons.This issue affects Happy Addons for Elementor: from n/a through <= 3.10.4.https://patchthecve.com/cve/CVE-2024-2789.htmlhttps://patchthecve.com/cve/CVE-2024-2789.htmlWed, 17 Jun 2026 07:25:33 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Calendy widget in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticathttps://patchthecve.com/cve/CVE-2024-2788.htmlhttps://patchthecve.com/cve/CVE-2024-2788.htmlWed, 17 Jun 2026 07:25:33 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Title HTML Tag in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated ahttps://patchthecve.com/cve/CVE-2024-2787.htmlhttps://patchthecve.com/cve/CVE-2024-2787.htmlWed, 17 Jun 2026 07:25:33 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title HTML Tag in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated ahttps://patchthecve.com/cve/CVE-2024-2786.htmlhttps://patchthecve.com/cve/CVE-2024-2786.htmlWed, 17 Jun 2026 07:25:33 +0000MEDIUM 5.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output escaping on the title_tag attribute. This makes it possible for authenticated attackers,https://patchthecve.com/cve/CVE-2024-1498.htmlhttps://patchthecve.com/cve/CVE-2024-1498.htmlWed, 17 Jun 2026 07:04:22 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Photo Stack Widget in all versions up to, and including, 3.10.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenthttps://patchthecve.com/cve/CVE-2024-1387.htmlhttps://patchthecve.com/cve/CVE-2024-1387.htmlWed, 17 Jun 2026 07:04:07 +0000MEDIUM 4.3: The Happy Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to insufficient authorization on the duplicate_thing() function in all versions up to, and including, 3.10.4. This makes it possible for attackers, with contributor-level access and above, to clone ahttps://patchthecve.com/cve/CVE-2024-29108.htmlhttps://patchthecve.com/cve/CVE-2024-29108.htmlWed, 17 Jun 2026 07:22:25 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leevio Happy Addons for Elementor allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.10.1.https://patchthecve.com/cve/CVE-2024-1377.htmlhttps://patchthecve.com/cve/CVE-2024-1377.htmlWed, 17 Jun 2026 07:04:05 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author_meta_tag’ attribute of the Author Meta widget in all versions up to, and including, 3.10.3 due to insufficient input sanitization and output escaping. This makes it possible for authentichttps://patchthecve.com/cve/CVE-2024-1366.htmlhttps://patchthecve.com/cve/CVE-2024-1366.htmlWed, 17 Jun 2026 07:04:04 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘archive_title_tag’ attribute of the Archive Title widget in all versions up to, and including, 3.10.3 due to insufficient input sanitization and output escaping. This makes it possible for authehttps://patchthecve.com/cve/CVE-2024-0838.htmlhttps://patchthecve.com/cve/CVE-2024-0838.htmlWed, 17 Jun 2026 06:54:24 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the side image URL parameter in the Age Gate in all versions up to, and including, 3.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackerhttps://patchthecve.com/cve/CVE-2024-0438.htmlhttps://patchthecve.com/cve/CVE-2024-0438.htmlWed, 17 Jun 2026 06:53:30 +0000MEDIUM 6.4: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapper link parameter in the Age Gate in all versions up to, and including, 3.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers