CVE-2026-33074

CVE-2026-33074 affects Discourse (subs plugin). From versions 2026.1.0-latest up to before 2026.1.3, 2026.2.0-latest up to before 2026.2.2, and 2026.3.0-latest up to before 2026.3.0, a user could purchase a lower-tier subscription yet obtain higher-tier benefits. Root cause details are not provid...