medium5.3
CVE-2026-106028
The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons, allowing unauthent…
Impact
The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons, allowing unauthenticated attackers to create arbitrary coupons, including 100%-off and free-shipping coupons.
Affected products
| Product | Affected versions |
|---|---|
| ActiveTrail For WooCommerce WordPress Plugin | through 1.2.6 |
Versions were read from the advisory text. No structured product data has been published for this record yet.