WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Happy Addons for Elementor

HappyAddons packs Header Footer Builder, Megamenu, Single Post, Archive Page, Slider Builder, & 500+ Ready Templates into one powerful Elementor A …

39Reported vulnerabilities
6.5Highest CVSS score
3.23.1Latest version
400,000+Active installs

What to do now

Update Happy Addons for Elementor to 3.21.0 or later. 39 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 30, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days
Affected versionsFixed inPublished
CVE-2026-1210 Medium 6.4 0.3% 0 to 3.20.7 (inclusive) 3.20.8 February 3, 2026
CVE-2025-68999 Medium 6.5 0.3% 3.20.4 and earlier 3.20.6 January 23, 2026
CVE-2025-14635 Medium 6.4 0.3% 0 to 3.20.3 (inclusive) 3.20.4 December 23, 2025
CVE-2025-30766 Medium 6.4 0.4% 3.16.2 and earlier 3.16.3 March 27, 2025
CVE-2024-32698 Medium 6.4 0.3% 3.10.4 and earlier 3.10.5 April 19, 2024
CVE-2024-2788 Medium 6.4 0.4% 3.10.4 and earlier 3.10.5 April 4, 2024
CVE-2024-2789 Medium 6.4 0.3% 3.10.4 and earlier 3.10.5 April 4, 2024
CVE-2024-2787 Medium 6.4 0.3% 3.10.4 and earlier 3.10.5 April 4, 2024
CVE-2026-2918 Medium 6.4 0.2% 0 to 3.21.0 (inclusive) 3.21.1 March 11, 2026
CVE-2024-47357 Medium 6.4 0.2% 3.12.0 and earlier 3.12.1 September 30, 2024
CVE-2023-6632 Medium 6.1 0.5% Before 3.10.0 3.10.0 January 11, 2024
WF-1453815d-4e28-41ec-9aa4-4fd2899c619a Medium 6.4 3.10.0 and earlier 3.10.1 January 9, 2024
CVE-2024-12852 Medium 5.4 0.3% Before 3.15.2 3.15.2 January 8, 2025
CVE-2024-48045 Medium 5.4 0.4% 3.12.3 and earlier 3.12.4 October 13, 2024
CVE-2024-6627 Medium 5.4 0.3% 0 to 3.11.2 (inclusive) 3.11.3 July 27, 2024
CVE-2024-5790 Medium 5.4 0.3% Before 3.11.2 3.11.2 June 29, 2024
CVE-2024-5347 Medium 5.4 0.3% 0 to 3.10.9 (inclusive)
0 to 3.10.9 (inclusive)
3.11.0 May 31, 2024
CVE-2024-5041 Medium 5.4 0.3% 0 to 3.10.9 (inclusive) 3.11.0 May 31, 2024
CVE-2024-5088 Medium 5.4 0.4% 0 to 3.10.8 (inclusive) 3.10.9 May 18, 2024
CVE-2024-4865 Medium 5.4 0.4% 0 to 3.10.8 (inclusive) 3.10.9 May 18, 2024
CVE-2024-4391 Medium 5.4 0.3% 0 to 3.10.7 (inclusive) 3.10.8 May 16, 2024
CVE-2024-4478 Medium 5.4 0.3% 0 to 3.10.7 (inclusive) 3.10.8 May 16, 2024
CVE-2024-3891 Medium 5.4 0.4% 0 to 3.10.5 (inclusive) 3.10.6 May 2, 2024
CVE-2024-3724 Medium 5.4 0.5% 0 to 3.10.4 (inclusive) 3.10.5 May 2, 2024
CVE-2024-3890 Medium 5.4 0.3% 0 to 3.10.6 (inclusive) 3.10.7 April 26, 2024
CVE-2024-2786 Medium 5.4 0.5% 0 to 3.10.4 (inclusive) 3.10.5 April 9, 2024
CVE-2024-1498 Medium 5.4 0.5% 0 to 3.10.3 (inclusive) 3.10.4 April 9, 2024
CVE-2024-1377 Medium 5.4 0.4% 0 to 3.10.3 (inclusive) 3.10.4 March 7, 2024
CVE-2024-1366 Medium 5.4 0.4% 0 to 3.10.3 (inclusive) 3.10.4 March 7, 2024
CVE-2024-0838 Medium 5.4 0.5% 0 to 3.10.1 (inclusive) 3.10.2 February 29, 2024
CVE-2024-0438 Medium 5.4 0.6% 0 to 3.10.1 (inclusive) 3.10.2 February 29, 2024
CVE-2023-51676 Medium 5.4 0.3% Before 3.10.0 3.10.0 December 27, 2023
CVE-2026-25468 Medium 5.3 0.3% 3.20.8 and earlier 3.21.0 May 7, 2026
CVE-2026-2917 Medium 5.4 0.2% 0 to 3.21.0 (inclusive) 3.21.1 March 11, 2026
CVE-2024-1387 Medium 4.3 0.6% 0 to 3.10.4 (inclusive) 3.10.5 April 9, 2024
CVE-2025-63077 Medium 4.3 0.3% 3.20.3 and earlier 3.20.4 December 4, 2025
CVE-2024-8801 Medium 4.3 0.4% Before 3.12.3 3.12.3 September 25, 2024
CVE-2024-24833 Medium 4.3 0.4% 3.10.1 and earlier 3.10.2 February 2, 2024
CVE-2023-28989 Medium 4.3 0.3% 3.8.2 and earlier 3.8.3 March 29, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.