Advisories · Technology

VillaTheme HAPPY.

Every CVE that names VillaTheme HAPPY among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-39593 CVE record

CVSS 6.5 Medium

WordPress HAPPY plugin <= 1.0.10 - Broken Access Control vulnerability
- VillaTheme HAPPY
- Broken access control
Not analysed yet 21 May 2026
CVE-2025-67977 CVE record

CVSS 8.2 High

WordPress HAPPY plugin <= 1.0.8 - Broken Access Control vulnerability
- VillaTheme HAPPY
- Broken access control
Not analysed yet 20 Feb 2026
CVE-2025-68556 CVE record

CVSS 5.3 Medium

WordPress HAPPY plugin <= 1.0.9 - Broken Access Control vulnerability
- VillaTheme HAPPY
- Broken access control
Not analysed yet 23 Dec 2025
CVE-2025-49372 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress HAPPY plugin <= 1.0.7 - Remote Code Execution (RCE) vulnerability
- VillaTheme HAPPY
- Code injection
Not analysed yet 6 Nov 2025
CVE-2025-53571 CVE record

CVSS 6.5 Medium

WordPress HAPPY plugin <= 1.0.6 - Broken Access Control vulnerability
- VillaTheme HAPPY
- Broken access control
Not analysed yet 5 Sept 2025