CVE-2026-106028

UNKNOWN 0.0

ActiveTrail for WooCommerce <= 1.2.6 - Unauthenticated Arbitrary Coupon Creation

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons, allowing unauthenticated attackers to create arbitrary coupons, including 100%-off and free-shipping coupons.

Vendor	unknown
Product	activetrail for woocommerce
Published	Oct 19, 2026

Stay Ahead of the Next One

Get instant alerts for unknown activetrail for woocommerce

Be the first to know when new unknown vulnerabilities affecting unknown activetrail for woocommerce are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / ActiveTrail for WooCommerce

0 ≤ 1.2.6

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/0865bdd3-8ce9-4a3b-a174-07076dee8565/

Credits

Ryan Fabella WPScan