Live › vulnerability › CVE-2026-109891
Happy Addons for Elementor, a WordPress plugin, has a missing authorization check that lets a user reach functions they should not control. The sources do not say what data or actions an attacker gains beyond incorrectly configured access control.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Sites running the Happy Addons for Elementor WordPress plugin at version 3.50.1 or earlier. The sources do not describe which roles or settings are needed to reach the flaw.
No product ranges from the sources yet.
3.50.1.3.50.1 is implied by the affected range; the exact version is unknown.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor: from n/a through 3.50.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-109891")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.