CVE · Medium

CVE-2025-63077 — Happy Addons for Elementor [happy-elementor-addons] < 3.20.4

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-63077 Happy Addons for Elementor [happy-elementor-addons] < 3.20.4 Missing Authorization Medium 4.3 < 3.20.4 3.20.4 2025-12-04

CVE-2025-63077

The Happy Addons for Elementor plugin, up to version 3.20.3, is susceptible to unauthorized access because it lacks proper capability checks in certain functions. Authenticated users with at least contributor permissions can exploit this flaw to carry out actions they should not be authorized to perform.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.