CVE-2026-124269: WordPress Happy Addons for Elementor plugin <= 3.51.0 - Broken Access Control vulnerability

Q: Who can exploit this vulnerability?

The vector and privileges indicate that exploitation can be performed remotely by an attacker with low-level privileges. No user interaction is required.

Q: What is the potential impact?

The issue can expose a limited amount of confidential information. The provided scoring indicates no integrity or availability impact.

Q: Which plugin versions are affected?

Happy Addons for Elementor versions through 3.51.0 are affected. The provided data does not identify a fixed version.

Published Nov 11, 2026

Updated

Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor: from n/a through 3.51.0.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/happy-addons-for-elementor to a version that resolves this vulnerability.
Fixed in 3.51.3

Event History

Nov 11, 2026

CVE Published

via MITRE·12:07 PM

Data Sourced

via MITRE·12:07 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

The vector and privileges indicate that exploitation can be performed remotely by an attacker with low-level privileges. No user interaction is required.

What is the potential impact?

The issue can expose a limited amount of confidential information. The provided scoring indicates no integrity or availability impact.

Which plugin versions are affected?

Happy Addons for Elementor versions through 3.51.0 are affected. The provided data does not identify a fixed version.

CVE-2026-124269: WordPress Happy Addons for Elementor plugin <= 3.51.0 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What is the potential impact?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What is the potential impact?

Which plugin versions are affected?