Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| thehappymonster | Happy Addons for Elementor | unaffected |
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-27730 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output escaping on the title_tag attribute. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. |
Wed, 08 Apr 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag |
Tue, 07 Jan 2025 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Leevio
Leevio happy Addons For Elementor |
|
| Weaknesses | CWE-79 | |
| CPEs | cpe:2.3:a:leevio:happy_addons_for_elementor:*:*:*:*:free:wordpress:*:* | |
| Vendors & Products |
Leevio
Leevio happy Addons For Elementor |
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published:
Updated: 2026-04-08T16:49:51.034Z
Reserved: 2024-03-21T16:50:25.495Z
Link: CVE-2024-2786
Vulnrichment
Updated: 2024-08-01T19:25:41.413Z
NVD
Status : Modified
Published: 2024-04-09T19:15:36.653
Modified: 2026-04-08T18:21:11.917
Link: CVE-2024-2786
Redhat
No data.
OpenCVE Enrichment
No data.