CVE-2025-68999
WordPress Happy Addons for Elementor plugin <= 3.20.4 - SQL Injection vulnerability
HIGH 8.5EPSS 0.3%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Blind SQL Injection.This issue affects Happy Addons for Elementor: from n/a through <= 3.20.4.
- Affected
- HappyMonster · Happy Addons for Elementor
- CVSS v3.1 PATCHSTACK
- 8.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L - EPSS
- 0.30% chance of exploitation in the next 30 days, 21st percentile
- Published
- 2026-01-22
- Updated
- 2026-04-28
Proof-of-concept exploits (2)
- FOLKS-iwd/CVE-2025-68999-POC1★ · 2026-08-20
- pipo-cyber/CVE-2025-68999-POC0★ · 2026-04-20