CVE-2026-124269mediumCWE-862

CVE-2026-124269: medium-severity vulnerability in weDevs Happy Addons for Elementor

WordPress Happy Addons for Elementor plugin <= 3.51.0 - Broken Access Control vulnerability

Published

Follow this CVE+ Monitor Happy Addons for Elementor

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3
Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor: from n/a through 3.51.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
weDevs · Happy Addons for Elementor
Related CVEs — weDevs Happy Addons for Elementor

In the same product, most dangerous first.

CVE-2021-24292—Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSSEPSS 0.6%CVE-2026-25468MEDIUMWordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2023-28989MEDIUMWordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-116850MEDIUMWordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-109891MEDIUMWordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerabilityEPSS 0.1%CVE-2026-104393MEDIUMWordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%