The Happy Addons for Elementor plugin for WordPress has a security vulnerability. This is because it does not properly check for harmful code in a certain part of the plugin called the Gradient Heading widget. This means that someone with Contributor-level or higher access can add their own code to a page, which will then run whenever someone opens that page.