SecAlerts
leevio logo

leevio

Security Risk Profile

40
/100
medium

Security Risk Score

Comprehensive risk assessment based on 26 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from February 20, 2024 to present

26
Total CVEs
2
Critical+High
0
Exploited
0
Unpatched

Threat Assessment

Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
40/100
medium

Severity Distribution

Critical
0
High
2
Medium
24
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
12

Age Distribution

Common Weaknesses (CWE)

1
XSS
23

Most Affected Products

1. Leevio Happy Addons For Elementor Wordpress26
2. Happy Addons Happy Addons for Elementor1

Recent Vulnerabilities

See more →
CVE-2024-10538
CVSS 6.4medium

Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison

11/12/2024
CVE-2024-48045
CVSS 8.8high

WordPress Happy Elementor Addons plugin <= 3.12.3 - Broken Access Control vulnerability

11/1/2024
CVE-2024-47357
CVSS 6.5medium

WordPress Happy Addons for Elementor plugin <= 3.12.0 - Cross Site Scripting (XSS) vulnerability

10/6/2024
CVE-2024-6627
CVSS 6.4EPSS 0%medium

Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget

7/27/2024🔧 No Patch
CVE-2024-5041
CVSS 6.4EPSS 0%medium

Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion

5/31/2024🔧 No Patch
CVE-2024-5347
CVSS 6.4EPSS 0%medium

Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget

5/31/2024🔧 No Patch
CVE-2024-5088
CVSS 6.4EPSS 0%medium

Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

5/18/2024🔧 No Patch
CVE-2024-4865
CVSS 6.4EPSS 0%medium

Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter

5/18/2024🔧 No Patch
CVE-2024-4391
CVSS 6.4EPSS 0%medium

Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget

5/16/2024🔧 No Patch
CVE-2024-4478
CVSS 6.4EPSS 0%medium

Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget

5/16/2024🔧 No Patch

Monitor leevio in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

leevio Security Vulnerabilities & Risk Score | 26 CVEs | SecAlerts - SecAlerts