CVE-2026-14848

The Paid Membership Subscriptions WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout belongs to the current user, allowing any authenticated user with Subscriber-level access and above to take over another member's...

PT-2024-29575 · Unknown · Openobserve

Name of the Vulnerable Software and Affected Versions: OpenObserve versions 0.4.4 through 0.9.x Description: OpenObserve is an open-source observability platform that contains a cross-site scripting issue in the openobserve/web/src/views/MemberSubscription.vue file, specifically in line 32. The...

OpenObserve 安全漏洞

OpenObserve is a cloud-native observability platform open-sourced by OpenObserve. A security vulnerability exists in OpenObserve versions prior to 0.4.4 through 0.10.0, which stems from openobserve/web/src/views/MemberSubscription.vue contains a cross-site scripting vulnerability at line 32...

JVN#48120704: Movable Type plugin A-Form vulnerable to cross-site scripting

Movable Type plugin A-Form provided by ARK-Web co., ltd. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who accessed the site using the product. Solution Update the Software Update A-Form to the latest version...