Happy Addons for Elementor

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ Pao

   3mo ago

   La experiencia con el equipo fue sobresaliente. La producción audiovisual y la narrativa institucional estuvieron alineadas con los estándares más altos, logrando un impacto positivo en la comunidad y en los jurados. La organización técnica y creativa permitió un cubrimiento total del evento, con materiales visuales impecables y memoria audiovisual de gran valor cultural.

   Read on wp.org ↗
2. ★★★★★ imanhali

   4mo ago

   i am happy for free

   Read on wp.org ↗
3. ★★★★★ antoniogessenasc

   4mo ago

   Estou esperimentando o plugin Happy Addons, faz duas semanas, por enquanto está me ajudando.

   Read on wp.org ↗
4. ★★★★★ codo68

   6mo ago

   super

   Read on wp.org ↗
5. ★★★★★ ricardoquiroz

   7mo ago

   Great Addons the free ones are superb

   Read on wp.org ↗
6. ★★★★★ coachaymen

   8mo ago

   Excellet : easy to install, to use and to maintain.

   Read on wp.org ↗
7. ★★★★★ Jorge del Campo Andrade

   9mo ago

   I encountered an issue with the Events Calendar widget displaying all-day events. Submitting a ticket was very easy, and Rubyat from the support team helped me resolve it, keeping me updated on every development in the case.

   Read on wp.org ↗
8. ★★★★★ greenloopmarket

   9mo ago

   👌 This topic was modified 7 months ago by greenloopmarket.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.23.0 New: Liquid Glass Feature. New: WhatsApp Button widget. Fix: Notice & Review CSS issue with WP 7. 3.23.0
2. — Version 3.22.0 Update: Made Compatible with PHP 8.5 Update: Made Compatible with WordPress 7.0 Update: Made Compatible with Elementor 4.1 3.22.0
3. — Version 3.21.4 Tweak: Added Hugeicons Autoloading. 3.21.4
4. — Version 3.21.3 Fix: Justified Grid widget Compatible with Elementor’s Tabs & Accordion widgets. 3.21.3
5. — Version 3.21.2 Update: Made Compatible with Elementor 4.0 3.21.2
6. — Version 3.21.1 Fix: Template Conditions Manager security issue. Fix: Happy Clone security issue. 3.21.1

44 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Happy Addons for Elementor <= 3.20.8 - Unauthenticated Information Exposure ↗
   2026-05-07 CVE-2026-25468 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.20.8 Patched in 3.21.0
2. Medium · 5.4 Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter ↗
   2026-03-10 CVE-2026-2917 Authorization Bypass Through User-Controlled Key Affects <= 3.21.0 Patched in 3.21.1
3. Medium · 6.4 Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions ↗
   2026-03-10 CVE-2026-2918 Authorization Bypass Through User-Controlled Key Affects <= 3.21.0 Patched in 3.21.1
4. Medium · 6.4 Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field ↗
   2026-02-02 CVE-2026-1210 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.20.7 Patched in 3.20.8
5. Medium · 6.5 Happy Addons for Elementor <= 3.20.4 - Authenticated (Contributor+) SQL Injection ↗
   2026-01-23 CVE-2025-68999 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.20.4 Patched in 3.20.6
6. Medium · 6.4 Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS ↗
   2025-12-22 CVE-2025-14635 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.20.3 Patched in 3.20.4
7. Medium · 4.3 Happy Addons for Elementor <= 3.20.3 - Missing Authorization ↗
   2025-12-04 CVE-2025-63077 Missing Authorization Affects <= 3.20.3 Patched in 3.20.4
8. Medium · 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library ↗
   2025-07-02 CVE-2024-5647 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.12.2 Patched in 3.12.3
9. Medium · 6.4 Happy Addons for Elementor <= 3.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-03-27 CVE-2025-30766 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.16.2 Patched in 3.16.3
10. Medium · 6.4 Happy Addons for Elementor <= 3.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-01-07 CVE-2024-12852 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.15.1 Patched in 3.15.2
11. Medium · 6.4 Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison ↗
    2024-11-11 CVE-2024-10538 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.12.5 Patched in 3.12.6
12. Medium · 5.4 Happy Addons for Elementor <= 3.12.3 - Missing Authorization ↗
    2024-10-13 CVE-2024-48045 Missing Authorization Affects <= 3.12.3 Patched in 3.12.4
13. Medium · 6.4 Happy Addons for Elementor <= 3.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-09-30 CVE-2024-47357 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.12.0 Patched in 3.12.1
14. Medium · 4.3 Happy Addons for Elementor <= 3.12.2 - Authenticated (Contributor+) Sensitive Information Exposure ↗
    2024-09-23 CVE-2024-8801 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.12.2 Patched in 3.12.3
15. Medium · 6.4 Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget ↗
    2024-07-26 CVE-2024-6627 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.11.2 Patched in 3.11.3
16. Medium · 6.4 Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget ↗
    2024-06-28 CVE-2024-5790 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.11.1 Patched in 3.11.2
17. Medium · 6.4 Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Widget ↗
    2024-05-30 CVE-2024-5347 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.9 Patched in 3.11.0
18. Medium · 6.4 Happy Addons for Elementor <= 3.10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion ↗
    2024-05-30 CVE-2024-5041 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.9 Patched in 3.11.0
19. Medium · 6.4 Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter ↗
    2024-05-17 CVE-2024-4865 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.8 Patched in 3.10.9
20. Medium · 6.4 Happy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-05-17 CVE-2024-5088 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.8 Patched in 3.10.9
21. Medium · 6.4 Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget ↗
    2024-05-15 CVE-2024-4391 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.7 Patched in 3.10.8
22. Medium · 6.4 Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget ↗
    2024-05-15 CVE-2024-4478 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.7 Patched in 3.10.8
23. Medium · 6.4 Happy Addons for Elementor <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendly Widget ↗
    2024-04-25 CVE-2024-3890 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.6 Patched in 3.10.7
24. Medium · 6.4 Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-04-19 CVE-2024-32698 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.4 Patched in 3.10.5
25. Medium · 6.4 Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline ↗
    2024-04-19 CVE-2024-3724 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.4 Patched in 3.10.5
26. Medium · 6.4 Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags ↗
    2024-04-19 CVE-2024-3891 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.5 Patched in 3.10.6
27. Medium · 5.4 Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag ↗
    2024-04-04 CVE-2024-2786 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.4 Patched in 3.10.5
28. Medium · 6.4 Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag ↗
    2024-04-04 CVE-2024-2788 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.4 Patched in 3.10.5
29. Medium · 4.3 Happy Addons for Elementor <= 3.10.4 - Incorrect Authorization to Information Exposure ↗
    2024-04-04 CVE-2024-1387 Missing Authorization Affects <= 3.10.4 Patched in 3.10.5
30. Medium · 6.4 Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy ↗
    2024-04-04 CVE-2024-2789 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.4 Patched in 3.10.5
31. Medium · 6.4 Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag ↗
    2024-04-04 CVE-2024-2787 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.4 Patched in 3.10.5
32. Medium · 6.4 Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget ↗
    2024-04-04 CVE-2024-1498 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.3 Patched in 3.10.4
33. Medium · 6.4 Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Archive Title Widget ↗
    2024-03-06 CVE-2024-1366 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.3 Patched in 3.10.4
34. Medium · 6.4 Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Meta Widget ↗
    2024-03-06 CVE-2024-1377 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.3 Patched in 3.10.4
35. Medium · 6.4 Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-02-13 CVE-2024-0438 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.1 Patched in 3.10.2
36. Medium · 6.4 Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-02-13 CVE-2024-0838 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.1 Patched in 3.10.2
37. Medium · 4.3 Happy Addons for Elementor <= 3.10.1 - Missing Authorization via add_row_actions ↗
    2024-02-02 CVE-2024-24833 Missing Authorization Affects <= 3.10.1 Patched in 3.10.2
38. Medium · 6.4 Happy Elementor Addons <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-01-09 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.10.0 Patched in 3.10.1
39. Medium · 6.1 Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting ↗
    2024-01-05 CVE-2023-6632 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.9.1.1 Patched in 3.10.0
40. Medium · 5.4 Happy Addons for Elementor <= 3.9.1.1 - Server Side Request Forgery ↗
    2023-12-27 CVE-2023-51676 Server-Side Request Forgery (SSRF) Affects < 3.10.0 Patched in 3.10.0
41. Medium · 4.3 Happy Addons for Elementor <= 3.8.2 - Cross-Site Request Forgery via handle_optin_optout() ↗
    2023-03-29 CVE-2023-28989 Cross-Site Request Forgery (CSRF) Affects <= 3.8.2 Patched in 3.8.3
42. Medium · 4.3 Appsero <= 1.2.1 - Missing Authorization ↗
    2022-12-16 Missing Authorization Affects <= 3.8.2 Patched in 3.8.3
43. Medium · 4.3 Appsero <= 1.2.0 - Cross-Site Request Forgery ↗
    2022-12-14 CVE-2022-47150 Cross-Site Request Forgery (CSRF) Affects <= 3.8.2 Patched in 3.8.3
44. Medium · 6.4 Happy Addons for Elementor <= 2.23.0 & Pro Version < 1.17.0 - Stored Cross-Site Scripting ↗
    2021-04-26 CVE-2021-24292 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.24.0 Patched in 2.24.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 15 languages, 5 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-11-25 300K+ → 400K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder 2M+ installs · 4.9★ · 3 shared tags A
• Royal Addons for Elementor – Addons and Templates Kit for Elementor 600K+ installs · 4.8★ · 3 shared tags A
• Sina Extension for Elementor 40K+ installs · 4.6★ · 3 shared tags A
• Ultimate Bootstrap Elements for Elementor 6K+ installs · 4.0★ · 3 shared tags C
• Document Embedder Addons for Elementor – Embed Documents in Elementor Websites 6K+ installs · 3.8★ · 3 shared tags B
• Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) 4K+ installs · 4.3★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for Happy Addons for Elementor into a readme, a review or a deck. It updates itself.

Happy Addons for Elementor: 400K+ active installs, 4.8★ (487 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/happy-elementor-addons