PT-2026-117229

CVE-2026-106028

·

Published

2026-10-19

·

Updated

2026-10-19

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions ActiveTrail for WooCommerce versions prior to 1.2.7
Description The plugin fails to perform authorization checks before creating WooCommerce coupons. This allows unauthenticated attackers to create arbitrary coupons, such as those providing 100% discounts or free shipping.
Recommendations Update ActiveTrail for WooCommerce to version 1.2.7 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2026-106028
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com