PT-2026-6031 · Elementor+1 · Elementor+1

Knani Alaaeddine

·

Published

2026-02-03

·

Updated

2026-02-03

·

CVE-2026-1210

CVSS v3.1

6.4

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Happy Addons for Elementor plugin versions up to and including 3.20.7
Description The Happy Addons for Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to inadequate input sanitization and output escaping in the elementor data meta field. Authenticated attackers with Contributor-level access or higher can inject malicious web scripts into pages. These scripts will then execute whenever a user accesses the compromised page.
Recommendations Update the Happy Addons for Elementor plugin to a version later than 3.20.7.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-1210

Affected Products

Elementor
Happy Addons For Elementor