HappyMonster vulnerabilities

🔔 Create alert RSS

Published CVEs affecting HappyMonster products: 2 record(s), with severity, exploitation and fixes.

Happy Addons for Elementor 2

Exploited only (KEV) →

CVE-2025-68999 High · 8.5 CWE-89 Jan 22, 2026

WordPress Happy Addons for Elementor plugin <= 3.20.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Blind SQL Injection.This issue affects Happy Addons for Elementor: from n/a through <= 3.20.4.

CVE-2025-63077 Medium · 4.3 CWE-862 Dec 9, 2025

WordPress Happy Addons for Elementor plugin <= 3.20.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor: from n/a through <= 3.20.3.