Happy Addons for Elementor < 3.10.2 - Contributor+ Stored Cross-Site Scripting

Description The does not properly sanitize the side image URL parameter in the Age Gate, allowing users with at least thhe contributor role to conduct Stored XSS attacks...

Happy Addons for Elementor < 3.10.2 - Contributor+ Stored Cross-Site Scripting

Description The plugin does not properly sanitize the wrapper link parameter in the Age Gate, allowing users with at least the contributor access to conduct Stored XSS attacks...

WordPress Happy Addons for Elementor Plugin <= 3.10.1 is vulnerable to Broken Access Control

Software Happy Addons for Elementor Type Plugin Vulnerable versions = 3.10.1 Fixed in 3.10.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-24833 Patch priority Low CVSS severity Low 4.3 Developer Leevio PSID 287eb1254e5d Credits Khalid Yusuf Required...

CVE-2023-6632

The Happy Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via DOM in all versions up to and including 3.9.1.1 versions up to 2.9.1.1 in Happy Addons for Elementor Pro due to insufficient input sanitization and output escaping. This makes it possible for...

Cross site scripting

The Happy Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via DOM in all versions up to and including 3.9.1.1 versions up to 2.9.1.1 in Happy Addons for Elementor Pro due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2023-6632

CVE-2023-6632 affects Happy Addons for Elementor (WordPress). Root cause: insufficient input sanitization and output escaping enabling Reflected Cross‑Site Scripting via DOM. Impact: unauthenticated attackers can inject scripts in pages triggered by user actions (e.g., clicking a link). Affected ...

CVE-2023-6632 Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting

The Happy Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via DOM in all versions up to and including 3.9.1.1 versions up to 2.9.1.1 in Happy Addons for Elementor Pro due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2024-15034 · Unknown +1 · Happy Addons For Elementor Pro +2

Name of the Vulnerable Software and Affected Versions: Happy Addons for Elementor versions up to 3.9.1.1 Happy Addons for Elementor Pro versions up to 2.9.1.1 Description: The issue is related to Reflected Cross-Site Scripting via DOM due to insufficient input sanitization and output escaping. Th...

WordPress Plugin Happy Addons for Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Happy Addons for Elementor Type Plugin Vulnerable versions = 3.9.1.1 Fixed in 3.10.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6632 Patch priority Low CVSS severity Low 6.1 Developer Leevio PSID 55912c88d746 Credits xEHLE Required...

Happy Addons for Elementor (Free < 3.10.0, Pro < 2.10.0) - Reflected Cross-Site Scripting

Description The plugins are vulnerable to Reflected Cross-Site Scripting via DOM due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into...

Happy Addons for Elementor < 3.10.0 - Contributor+ SSRF

Description The plugin is vulnerable to Server-Side Request Forgery, allowing authenticated attackers, with contributor access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services...

CVE-2023-51676

Server-Side Request Forgery SSRF vulnerability in Leevio Happy Addons for Elementor.This issue affects Happy Addons for Elementor: from n/a through 3.9.1.1...

CVE-2023-51676

Server-Side Request Forgery SSRF vulnerability in Leevio Happy Addons for Elementor.This issue affects Happy Addons for Elementor: from n/a through 3.9.1.1...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Leevio Happy Addons for Elementor.This issue affects Happy Addons for Elementor: from n/a through 3.9.1.1...

CVE-2023-51676

CVE-2023-51676 (Happy Addons for Elementor) : The connected documents confirm a Server-Side Request Forgery (SSRF) vulnerability in the Happy Addons for Elementor plugin, affecting the product from n/a through version 3.9.1.1. The entry is active and has been patched in a later release. The vulne...

CVE-2023-51676 WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Leevio Happy Addons for Elementor.This issue affects Happy Addons for Elementor: from n/a through 3.9.1.1...

WordPress Plugin Happy Addons for Elementor Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Happy Addons for Elementor...

PT-2023-31879 · Leevio · Leevio Happy Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Leevio Happy Addons for Elementor versions 3.9.1.1 and earlier Description: A Server-Side Request Forgery SSRF issue affects Leevio Happy Addons for Elementor. This issue allows an attacker to forge requests to servers, potentially leading to...

WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF)

Software Happy Addons for Elementor Type Plugin Vulnerable versions = 3.9.1.1 Fixed in 3.10.0 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2023-51676 Patch priority Low CVSS severity Low 4.9 Developer Leevio PSID dee56bc2c646 Credits...