# cve.now: Thehappymonster

The newest entries naming Thehappymonster as an affected vendor (up to 200), of 29 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-2917](https://cve.now/CVE-2026-2917.md): Happy Addons for Elementor \<= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post\_id' Parameter (CVSS 5.4)
- [CVE-2026-2918](https://cve.now/CVE-2026-2918.md): Happy Addons for Elementor \<= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions (CVSS 6.4)
- [CVE-2026-1210](https://cve.now/CVE-2026-1210.md): Happy Addons for Elementor \<= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '\_elementor\_data' Meta Field (CVSS 6.4)
- [CVE-2025-14635](https://cve.now/CVE-2025-14635.md): Happy Addons for Elementor \<= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS (CVSS 6.4)
- [CVE-2024-12852](https://cve.now/CVE-2024-12852.md): Happy Addons for Elementor \<= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-10538](https://cve.now/CVE-2024-10538.md): Happy Addons for Elementor \<= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison (CVSS 6.4)
- [CVE-2024-8801](https://cve.now/CVE-2024-8801.md): Happy Addons for Elementor \<= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure (CVSS 4.3)
- [CVE-2024-6627](https://cve.now/CVE-2024-6627.md): Happy Addons for Elementor \<= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget (CVSS 6.4)
- [CVE-2024-5790](https://cve.now/CVE-2024-5790.md): Happy Addons for Elementor \<= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget (CVSS 6.4)
- [CVE-2024-5041](https://cve.now/CVE-2024-5041.md): Happy Addons for Elementor \<= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion (CVSS 6.4)
- [CVE-2024-5347](https://cve.now/CVE-2024-5347.md): Happy Addons for Elementor \<= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget (CVSS 6.4)
- [CVE-2024-5088](https://cve.now/CVE-2024-5088.md): Happy Addons for Elementor \<= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-4865](https://cve.now/CVE-2024-4865.md): Happy Addons for Elementor \<= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via \_id Parameter (CVSS 6.4)
- [CVE-2024-4391](https://cve.now/CVE-2024-4391.md): Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS \<= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget (CVSS 6.4)
- [CVE-2024-4478](https://cve.now/CVE-2024-4478.md): Happy Addons for Elementor \<= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget (CVSS 6.4)
- [CVE-2024-3891](https://cve.now/CVE-2024-3891.md): Happy Addons for Elementor \<= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags (CVSS 6.4)
- [CVE-2024-3724](https://cve.now/CVE-2024-3724.md): Happy Addons for Elementor \<= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline (CVSS 6.4)
- [CVE-2024-3890](https://cve.now/CVE-2024-3890.md): Happy Addons for Elementor \<= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget (CVSS 6.4)
- [CVE-2024-1498](https://cve.now/CVE-2024-1498.md): Happy Addons for Elementor \<= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget (CVSS 6.4)
- [CVE-2024-2787](https://cve.now/CVE-2024-2787.md): Happy Addons for Elementor \<= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag (CVSS 6.4)
- [CVE-2024-2789](https://cve.now/CVE-2024-2789.md): Happy Addons for Elementor \<= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy (CVSS 6.4)
- [CVE-2024-1387](https://cve.now/CVE-2024-1387.md): Happy Addons for Elementor \<= 3.10.4 - Incorrect Authorization to Information Exposure (CVSS 4.3)
- [CVE-2024-2788](https://cve.now/CVE-2024-2788.md): Happy Addons for Elementor \<= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag (CVSS 6.4)
- [CVE-2024-2786](https://cve.now/CVE-2024-2786.md): Happy Addons for Elementor \<= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title\_tag (CVSS 5.4)
- [CVE-2024-1377](https://cve.now/CVE-2024-1377.md): Happy Addons for Elementor \<= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget (CVSS 6.4)
- [CVE-2024-1366](https://cve.now/CVE-2024-1366.md): Happy Addons for Elementor \<= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget (CVSS 6.4)
- [CVE-2024-0838](https://cve.now/CVE-2024-0838.md): Happy Addons for Elementor \<= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-0438](https://cve.now/CVE-2024-0438.md): Happy Addons for Elementor \<= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2023-6632](https://cve.now/CVE-2023-6632.md): Happy Addons for Elementor \<= 3.9.1.1 - Reflected Cross-Site Scripting (CVSS 6.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/thehappymonster
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.