Veille CVE

Lundi 19 octobre 2026

3 CVE sur 4

Critique 0 Élevée 0 Moyenne 3 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Create » ✕
  1. CVE-2026-94231 5.3 Moyenne

    Unknown TrueBooker

    The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices.

  2. CVE-2026-94230 5.3 Moyenne

    Unknown TrueBooker

    The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not validate the submitted service price server-side, allowing unauthenticated users to create bookings at a price of their choosing and to attach them to arbitrary customer accounts.

  3. CVE-2026-106028 5.3 Moyenne

    Unknown ActiveTrail for WooCommerce

    The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons, allowing unauthenticated attackers to create arbitrary coupons, including 100%-off and free-shipping coupons.