A vulnerability identified as critical has been detected in VillaTheme HAPPY Plugin up to 1.0.10 on WordPress. Impacted is an unknown function. Performing a manipulation results in missing authorization.
This vulnerability was named CVE-2026-39593. The attack may be initiated remotely. There is no available exploit.