Veille CVE

Lundi 19 octobre 2026

4 CVE

Critique 0 Élevée 0 Moyenne 3 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Create » ✕
  1. CVE-2026-94231 5.3 Moyenne

    Unknown TrueBooker

    The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices.

  2. CVE-2026-94230 5.3 Moyenne

    Unknown TrueBooker

    The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not validate the submitted service price server-side, allowing unauthenticated users to create bookings at a price of their choosing and to attach them to arbitrary customer accounts.

  3. CVE-2026-110034 3.7 Faible

    Unknown Salon Booking System

    The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a confirmed booking stored with a negative total.

  4. CVE-2026-106028 5.3 Moyenne

    Unknown ActiveTrail for WooCommerce

    The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons, allowing unauthenticated attackers to create arbitrary coupons, including 100%-off and free-shipping coupons.