Wedevs

Happy Addons For Elementor

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-12852

  • EPSS 0.06%
  • Veröffentlicht 08.01.2025 07:15:27
  • Zuletzt bearbeitet 03.04.2025 19:01:48

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_cmc_text' parameter of the Happy Mouse Cursor in all versions up to, and including, 3.15.1 due to insufficient input sanitization and output ...

4.3

CVE-2024-8801

  • EPSS 0.25%
  • Veröffentlicht 25.09.2024 01:15:47
  • Zuletzt bearbeitet 30.09.2024 14:23:46

The Happy Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.2 via the Content Switcher widget. This makes it possible for authenticated attackers, with Contributor-lev...

5.4

CVE-2024-5790

  • EPSS 0.23%
  • Veröffentlicht 29.06.2024 07:15:03
  • Zuletzt bearbeitet 21.11.2024 09:48:20

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Gradient Heading widget in all versions up to, and including, 3.11.1 due to insufficient input sanitization a...

6.1

CVE-2023-6632

  • EPSS 3.39%
  • Veröffentlicht 11.01.2024 09:15:50
  • Zuletzt bearbeitet 21.11.2024 08:44:15

The Happy Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via DOM in all versions up to and including 3.9.1.1 (versions up to 2.9.1.1 in Happy Addons for Elementor Pro) due to insufficient input sanitization ...

6.5

CVE-2023-51676

  • EPSS 0.39%
  • Veröffentlicht 29.12.2023 13:15:11
  • Zuletzt bearbeitet 21.11.2024 08:38:35

Server-Side Request Forgery (SSRF) vulnerability in Leevio Happy Addons for Elementor.This issue affects Happy Addons for Elementor: from n/a through 3.9.1.1.

6.1

CVE-2023-41236

  • EPSS 0.19%
  • Veröffentlicht 27.09.2023 15:19:27
  • Zuletzt bearbeitet 21.11.2024 08:20:53

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Happy addons Happy Elementor Addons Pro plugin <= 2.8.0 versions.

8.8

CVE-2023-28989

  • EPSS 0.07%
  • Veröffentlicht 10.07.2023 16:15:50
  • Zuletzt bearbeitet 21.11.2024 07:56:21

Cross-Site Request Forgery (CSRF) vulnerability in weDevs Happy Addons for Elementor plugin <= 3.8.2 versions.

5.4

CVE-2021-24292

Exploit
  • EPSS 0.22%
  • Veröffentlicht 17.05.2021 17:15:08
  • Zuletzt bearbeitet 21.11.2024 05:52:46

The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting(XSS) by lower-privileged users such as contributo...