CVE-2025-68999

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Blind SQL Injection.This issue affects Happy Addons for Elementor: from n/a through <= 3.20.4.

CVSS v3.1

8.5 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

EPSS

0.26% chance of exploitation in the next 30 days, 18th percentile

Published

2026-01-22

Updated

2026-04-28

Proof-of-concept exploits (2)

• FOLKS-iwd/CVE-2025-68999-POC
• pipo-cyber/CVE-2025-68999-POC

References

• CVE Record
• NVD entry

Related

• CVE-2025-0108
• CVE-2025-24071
• CVE-2026-2600
• CVE-2025-6899
• CVE-2025-6900
• CVE-2025-6898