CVE Catalog
CVE-2026-39593
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.31%
23th percentile - higher than 23% of all known CVEs
Summary
The HAPPY plugin from VillaTheme up to version 1.0.10 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.
Risk Assessment
An attacker without proper privileges can access administrative functions or sensitive data, potentially leading to privilege escalation.
Recommendation
Update the HAPPY plugin to a version later than 1.0.10 that includes authorization fixes.
Original NVD description (English source)
Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HAPPY: from n/a through 1.0.10.