CVE-2026-62080
MediumCVSS 6.5Summary
Happy Addons for Elementor plugin version 3.23.1 and earlier contains a Cross Site Scripting (XSS) vulnerability exploitable by contributors, allowing injection of malicious scripts.
Risk Assessment
Risk of malicious script execution in the user's browser, potentially leading to data theft or session hijacking.
Recommendation
Update the Happy Addons for Elementor plugin to the latest available version that includes the fix.
Other vulnerabilities in Happy Addons for Elementor
See all- CVE-2026-104393Medium
Stored XSS vulnerability in the Happy Addons for Elementor plugin by weDevs. Improper input neutralization during page generation allows persistent execution of malicious scripts.
- CVE-2025-63077Medium
The Happy Addons for Elementor plugin (versions up to and including 3.20.3) contains a Missing Authorization vulnerability due to incorrectly configured access control security levels. This may allow unauthorized access to functions or data.
Original NVD description (English source)
Contributor Cross Site Scripting (XSS) in Happy Addons for Elementor <= 3.23.1 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS