ActiveTrail CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review ActiveTrail CVE published 2026-10-19

CVE-2026-106028

CVE-2026-106028 debrief based on the supplied source corpus. The CVE record was published on 2026-10-19T06:17:20.510Z and has not been modified since then. The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons, allowing unauthenticated attackers to create arbitrary coupons, including 100%-off and free-shipping coupons. T [truncated]