Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2026-39593

Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HAPPY: from n/a through 1.0.10.

VectorNETWORK

PublishedMay 21, 2026, 18:16

Published Byaudit@patchstack.com

Base Score

Score6.5

Affected Versions

No affected versions found.

References

https://patchstack.com/database/wordpress/plugin/happy-helpdesk-support-ticket-system/vulnerability/wordpress-happy-plugin-1-0-10-broken-access-control-vulnerability?_s_id=cve

Weakness Type

CWE-862

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK