A vulnerability identified as critical has been detected in VillaTheme HAPPY Plugin up to 1.0.10 on WordPress. Impacted is an unknown function. Performing a manipulation results in missing authorization. This vulnerability was named CVE-2026-39593 . The attack may be initiated remotely. There is no available exploit.