VillaTheme HAPPY Helpdesk Support Ticket System Remote Code Inclusion Vulnerability
Vulnerability
A code injection vulnerability allowing remote code inclusion has been identified in the VillaTheme HAPPY Helpdesk Support Ticket System plugin, specifically in versions through 1.0.7. This vulnerability arises from improper control over code generation, enabling potentially malicious users to execute arbitrary code on the server.
Impact
Exploitation of this vulnerability allows for remote code execution on the server where the affected plugin is installed.
Added: Nov 6, 2025, 5:08 PM
Updated: Nov 6, 2025, 9:29 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.4remediation
0.0relevance
0.9threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.