CVE-2024-1387

🗓️ 09 Apr 2024 19:15:16Reported by [email protected]Type

The Happy Addons for Elementor plugin for WordPress allows unauthorized data access via duplicate_thing() function up to version 3.10.

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress Plugin Happy Addons for Elementor 安全漏洞	9 Apr 202400:00	–	cnnvd
CVE	CVE-2024-1387	9 Apr 202418:59	–	cve
Cvelist	CVE-2024-1387 Happy Addons for Elementor <= 3.10.4 - Incorrect Authorization to Information Exposure	9 Apr 202418:59	–	cvelist
EUVD	EUVD-2024-17144	3 Oct 202520:07	–	euvd
Patchstack	WordPress Happy Addons for Elementor plugin <= 3.10.4 - Incorrect Authorization to Information Exposure vulnerability	17 Apr 202408:25	–	patchstack
Patchstack	WordPress Happy Addons for Elementor Plugin <= 3.10.4 is vulnerable to Sensitive Data Exposure	17 Apr 202400:00	–	patchstack
Positive Technologies	PT-2024-17999 · WordPress · Happy Addons For Elementor	9 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-1387	23 May 202510:11	–	redhatcve
Vulnrichment	CVE-2024-1387 Happy Addons for Elementor <= 3.10.4 - Incorrect Authorization to Information Exposure	9 Apr 202418:59	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 1, 2024 to April 7, 2024)	11 Apr 202417:23	–	wordfence

NVD

Node

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/happy-elementor-addons/trunk/classes/clone-handler.php
plugins	www.plugins.trac.wordpress.org/changeset/3064385/happy-elementor-addons/trunk/classes/clone-handler.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/aff10d5a-a2d0-461a-b52b-a25b647eaab4

08 Apr 2026 19:20Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.14.3

EPSS0.00285