Happy Addons for Elementor
HappyMonster
Developer
3.21.0
Latest version
400,000
Installations
No date
Last updated
Vulnerability history
0 present
38 patched
0 Mitigation rules
- Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field vulnerability<= 3.20.7Feb 2, 2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget vulnerability<= 3.10.3Feb 2, 2026
- Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag vulnerability<= 3.10.4Feb 2, 2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag vulnerability<= 3.10.4Feb 2, 2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag vulnerability<= 3.10.4Feb 2, 2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy vulnerability<= 3.10.4Feb 2, 2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline vulnerability<= 3.10.4Feb 2, 2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget vulnerability<= 3.10.7Feb 2, 2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion vulnerability<= 3.10.9Feb 2, 2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.10.8Feb 2, 2026
- SQL Injection vulnerability<= 3.20.4Jan 23, 2026
- Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library vulnerability<= 3.12.2Dec 31, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS vulnerability<= 3.20.3Dec 22, 2025
- Broken Access Control vulnerability<= 3.20.3Dec 4, 2025
- Cross Site Scripting (XSS) Vulnerability<= 3.16.2Mar 27, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.15.1Jan 7, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison vulnerability<= 3.12.5Nov 12, 2024
- Broken Access Control vulnerability<= 3.12.3Oct 13, 2024
- Cross Site Scripting (XSS) vulnerability<= 3.12.0Sep 30, 2024
- Authenticated (Contributor+) Sensitive Information Exposure vulnerability<= 3.12.2Sep 25, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget vulnerability<= 3.11.2Jul 29, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget vulnerability<= 3.11.1Jul 1, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget vulnerability<= 3.10.9May 31, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter vulnerability<= 3.10.8May 20, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget vulnerability<= 3.10.7May 16, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget vulnerability<= 3.10.6Apr 26, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags vulnerability<= 3.10.5Apr 22, 2024
- Cross Site Scripting (XSS) vulnerability<= 3.10.4Apr 19, 2024
- Incorrect Authorization to Information Exposure vulnerability<= 3.10.4Apr 17, 2024
- Cross Site Scripting (XSS) vulnerability<= 3.10.1Mar 15, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget vulnerability<= 3.10.3Mar 7, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget vulnerability<= 3.10.3Mar 7, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.10.1Feb 29, 2024
- Broken Access Control on Post Clone vulnerability<= 3.10.1Feb 2, 2024
- Reflected Cross-Site Scripting vulnerability<= 3.9.1.1Jan 5, 2024
- Server Side Request Forgery (SSRF) vulnerability<= 3.9.1.1Dec 27, 2023
- Cross Site Request Forgery (CSRF) vulnerability<= 3.8.2Mar 29, 2023
- Cross-Site Request Forgery (CSRF) vulnerability<= 3.7.2Mar 21, 2023