Client policy enforcement in Keycloak is bypassable by any user holding client management privileges who exploits a group-name collision across the group hierarchy. Because the policy engine resolves group membership by display name rather than unique identifier, an attacker can create or join a group in a different part of the hierarchy that shares a name with a privileged policy group, then register or update OAuth/OIDC clients without satisfying the required security hardening profiles. No public exploit has been identified at time of analysis, and active exploitation has not been confirmed by CISA KEV.
XML External Entity injection in veraPDF-validation's PDF parsing layer allows unauthenticated remote attackers to read arbitrary local files from the server or trigger outbound server-side requests to attacker-controlled endpoints by supplying crafted PDF documents. The two vulnerable code paths - PDFAValidator.validate() and GFPDAcroForm.getdynamicRender() - both use an unconfigured DocumentBuilderFactory that permits full DTD and external entity expansion. Patches are confirmed in versions 1.30.2 and 1.31.71; no public exploit or CISA KEV listing was identified at time of analysis.
An authentication bypass in Koollab LMS allows unauthenticated attackers to take over any account, including administrator accounts, by supplying a valid user UUID to the 2FA validation endpoint without providing primary credentials. Affected version 5.3.2 (and potentially earlier versions) exposes sensitive data and permits limited modification once an account is compromised. No active exploitation or public exploit code is known at the time of analysis.
Tool call injection in Pydantic AI's UI adapters (AG-UI via Agent.to_ag_ui()/AGUIAdapter, and Vercel AI via VercelAIAdapter) enables remote unauthenticated clients to force execution of registered server-side tools with attacker-supplied arguments, bypassing the framework's message-sanitization defense. The flaw affects pydantic-ai and pydantic-ai-slim versions 1.88.0-1.107.0 and 2.0.0b1-2.4.x. No public exploit code or CISA KEV listing exists at time of analysis, but the attack is low-complexity and exploitable against default configurations of applications using either UI adapter.
Account takeover in Ente Museum Server versions through 2.0.34 is achievable by an authenticated user designated as a victim's emergency contact, bypassing the configured recovery waiting period via a crafted `approve-recovery` API request. The vulnerability requires a pre-established trust relationship - the attacker must already be configured as the victim's emergency contact - which limits opportunistic mass exploitation, consistent with the low EPSS score of 0.17%. Security researcher VokeCyber has published a public technical writeup and blog post detailing the attack; no confirmed active exploitation or KEV listing exists at time of analysis.
Response body/Content-Length desynchronization in undici's retry interceptor allows a malicious or faulty upstream server to induce HTTP response smuggling against downstream clients of proxy and gateway applications. Affected versions span undici before 6.28.0, the 7.x line before 7.29.0, and the 8.x line before 8.9.0. An upstream that deliberately returns a partial response with mismatched framing and closes the socket early can cause the retry interceptor to assemble a body of a different length than the attached Content-Length, leading downstream consumers to experience response desynchronization, connection hangs, or data corruption. No public exploit has been identified at time of analysis, and this is not listed in CISA KEV.
File integrity compromise in Joomla Content Editor (JCE) before version 2.20.2 allows authenticated users holding file management permissions to rename files to invalid names - enabling creation of hidden dot-prefixed files (e.g., .htaccess, .env) and silent overwriting of existing files at the destination path. The root cause (CWE-20) is missing validation of the user-supplied target filename in the JCE rename API endpoint. No public exploit or CISA KEV listing exists at time of analysis; EPSS at 0.14% (4th percentile) indicates very low opportunistic exploitation probability, though the ability to silently replace sensitive server-side files such as .htaccess adds practical gravity that the CVSS integrity score alone does not fully convey.
Insecure Direct Object Reference in MasterStudy LMS WordPress Plugin (all versions through 3.7.14) allows authenticated Instructors to permanently delete media attachments belonging to any other WordPress user. The `stm_lms_delete_cover()` function accepts a caller-supplied `file_id` and passes it directly to WordPress's `wp_delete_attachment()` without verifying that the requesting user owns the referenced attachment. Because WordPress stores attachments with sequential integer IDs, an Instructor-level account holder can iterate over IDs to destroy course materials, profile images, or uploaded documents created by students, other instructors, or administrators. No public exploit has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Cross-site scripting in the Link Library WordPress plugin (versions before 7.9.4) allows unauthenticated network-based attackers to inject malicious JavaScript that executes in the context of other users' browsers. The CVSS 4.0 vector assigns High subsequent-system impacts (SC:H/SI:H/SA:H), indicating exploitation could compromise visiting administrators and cascade to full WordPress site control. No public exploit code or CISA KEV listing has been identified at time of analysis, though Tenable reported the finding (TRA-2026-52) and a patched release (7.9.4) is available.
Stored Cross-Site Scripting in Newsletters Lite WordPress plugin versions ≤4.15 permits authenticated attackers with contributor-level access to inject arbitrary web scripts by abusing the 'link' attribute of the post_thumbnail and newsletters_post_thumbnail shortcodes. When a privileged user accesses a page containing the injected shortcode, the script executes in their session, potentially leading to session hijacking or credential theft. No active exploitation or public proof-of-concept is identified at time of analysis.
Stored cross-site scripting in Newsletters Lite WordPress plugin allows authenticated attackers with Contributor-level access or above to inject arbitrary scripts via the 'target' attribute of the [newsletters_post] shortcode. This affects versions up to 4.15 and can lead to script execution when other users view affected posts. No public exploit identified at time of analysis.
Stored Cross-Site Scripting in WowStore (all versions ≤ 4.4.24) permits authenticated contributors to plant arbitrary JavaScript into WordPress pages via the unsanitized 'currentPostId' block attribute in the Filter block, which then executes silently in the browser of any subsequent visitor - including administrators. The CVSS 6.4 score reflects Changed scope, meaning low-privilege attackers can impact higher-privilege users. No public exploit code has been identified and EPSS sits at 0.19% (9th percentile) with SSVC confirming no active exploitation, placing this in a prioritize-but-not-emergency tier.
Stored cross-site scripting in the WowStore WordPress plugin up to v4.4.24 allows authenticated attackers with contributor-level access to inject arbitrary web scripts via the 'filterMobileText' block attribute. The payload is stored inside a Gutenberg block delimiter JSON comment, bypassing wp_kses_post sanitization and executing when any user visits the affected page. No public exploit or active exploitation (KEV) identified at time of analysis; CVSS 6.4 (Medium) with EPSS risk unknown.
Stored Cross-Site Scripting in the Contact Form to Any API WordPress plugin (versions ≤ 3.0.6) allows authenticated attackers holding contributor-level access or higher to inject persistent malicious scripts via the cf7anyapi_form_field post meta field. Any user who subsequently loads a page containing the injected content will silently execute the attacker's script within their browser session, potentially exposing session tokens or enabling unauthorized actions. No active exploitation is confirmed - CISA KEV status is absent, EPSS sits at the 9th percentile (0.19%), and SSVC classifies exploitation as 'none' - indicating this is a low-urgency but real risk for multi-author WordPress deployments.
Arbitrary code execution in Autel MaxiCharger AC Elite Home EV chargers is possible for physically present attackers who supply a crafted, unsigned or improperly signed firmware update image to the device. The flaw (CWE-347) stems from the absence of cryptographic signature validation during the software update process - tagged as a JWT attack vector - meaning the update mechanism accepts attacker-controlled images without verifying their authenticity. No public exploit has been identified at time of analysis, and exploitation requires physical proximity, but a successful attack achieves full code execution in the device context with high confidentiality, integrity, and availability impact.
Stored XSS in the Booking System Trafft WordPress plugin (versions up to and including 1.0.17) allows authenticated attackers holding Subscriber-level access to permanently replace the plugin's embed-script origin with an attacker-controlled URL, causing arbitrary JavaScript to execute in every site visitor's browser on any page rendering the booking shortcode. The root cause is a missing capability check on the `set_options` AJAX handler - the plugin relies solely on a nonce that is printed inline on every WordPress admin page (including profile.php), making it reachable by any logged-in user when the plugin operates in agency mode. No public exploit has been identified at time of analysis, but the persistent site-wide impact - including against administrators - elevates real-world risk significantly beyond what the 6.4 CVSS base score alone conveys.
Stored Cross-Site Scripting in the WPC Badge Management for WooCommerce WordPress plugin (all versions through 3.1.6) allows authenticated attackers with Contributor-level access to inject persistent JavaScript via the 'text' attribute of the wpcbm_best_seller shortcode. The injected payload executes silently in the browser of any visitor who loads an affected page, with scope change indicated by the CVSS S:C metric. No public exploit or CISA KEV listing is identified at time of analysis.
Out-of-bounds read in Apache Traffic Server's DNS answer parser (CWE-125) allows unauthenticated remote attackers - or adversaries capable of influencing DNS responses - to leak partial heap memory contents or crash the ATS process, affecting all three active release branches (8.x, 9.x, 10.x). The CVSS 6.5 Medium rating reflects no authentication barrier and no user interaction required, though impact is limited to partial confidentiality and availability loss with no integrity impact. No public exploit code and no CISA KEV listing are identified at time of analysis, but the network attack surface is broad given that every proxied request triggers DNS resolution.
Buffer overrun in the Apache Traffic Server multiplexer plugin's chunk-decode logic allows network-adjacent attackers who can influence upstream origin responses to cause denial of service across versions 8.0.0 through 10.1.3. The flaw is classified as CWE-787 (Out-of-bounds Write) and is constrained to availability impact only - no code execution or data exposure is indicated. No public exploit or CISA KEV listing has been identified, and the CVSS 3.7 Low score reflects meaningful real-world limitations, primarily the high attack complexity imposed by the upstream-input dependency.
HTTPS session reuse in Node.js 22.x, 24.x, and 26.x fails to bind identity checks to reused TLS sessions, enabling a low-privileged attacker with access to a shared HTTPS agent context to obtain confidential data across session boundaries. Rated CVSS 6.3 Medium with Scope:Changed and C:H, reflecting the cross-connection identity confusion impact even though the attack is gated behind AC:H and PR:L. No public exploit code and no CISA KEV listing have been identified at time of analysis.
HTTP/2 HPACK dynamic table desynchronization in Apache Traffic Server (versions 8.0.0-8.1.9, 9.0.0-9.2.14, and 10.0.0-10.1.3) exposes a premature-state-update flaw in header compression logic. An unauthenticated remote attacker can trigger an HPACK encode failure, leaving the server's encoder table out of sync with the peer decoder's table and corrupting all subsequent header blocks transmitted on that HTTP/2 connection. No public exploit has been identified at time of analysis; the AC:H rating indicates reliable triggering requires specific conditions, and CISA KEV does not list this vulnerability.
HTTP/2-to-HTTP/1 protocol conversion in Apache Traffic Server 10.0.0-10.1.3 forwards origin HTTP/2 trailers to downstream HTTP/1 clients without the required chunked transfer encoding framing, enabling HTTP response smuggling. The CVSS 8.3 Scope:Changed rating reflects that exploitation impacts downstream HTTP/1 clients architecturally separate from ATS itself, with potential for cache poisoning, response injection, and limited information disclosure. No public exploit code has been identified and this CVE is not listed in CISA KEV at time of analysis.
Persistent session hijacking in Grav Login Plugin before 3.8.13 allows any attacker holding a captured Remember Me cookie to authenticate indefinitely, bypassing the configured session timeout. The root cause is a PHP type-comparison bug in TokenStorage.php's findTriplet() method: the expiry check compares an array value against a scalar timestamp, a comparison that always evaluates incorrectly in PHP, effectively nullifying the token lifetime enforcement. No active exploitation confirmed (not in CISA KEV), and no public exploit code has been identified at time of analysis, but the flaw is straightforward to weaponize given a captured cookie.
Port-based access-control bypass in Apache Traffic Server stems from URL and userinfo mis-parsing that causes the proxy to evaluate ACL rules against an incorrect port value, allowing restricted backend ports to be reached. All three maintained release branches are affected - 8.0.0 through 8.1.9, 9.0.0 through 9.2.14, and 10.0.0 through 10.1.3 - meaning the majority of deployed ATS instances are vulnerable. No public exploit or active exploitation has been identified at time of analysis, but the Changed scope (S:C) in the CVSS vector signals that successful exploitation crosses the proxy-to-backend boundary, amplifying real-world impact beyond the ATS process itself.
Improper TLS certificate validation in Apache Traffic Server (ATS) versions 9.0.0-9.2.14 and 10.0.0-10.1.3 allows multiplexed HTTP/2 origin connections to be reused for requests targeting hostnames not covered by the existing connection's server certificate. When ATS coalesces HTTP/2 connections to origin servers, it omits the check confirming the server certificate's Subject Alternative Names cover the new request's hostname, meaning traffic may be silently routed over a connection authenticated for a different host. No public exploit has been identified at time of analysis; vendor-released patches are available in versions 9.2.15 and 10.1.4.
Out-of-bounds write buffer handling in the Node.js built-in zlib module (v26.x prior to v26.5.1) fails to throw an exception when a write buffer exceeds valid bounds, enabling a local denial-of-service via process crash or uncontrolled resource consumption. The Node.js security team rated this Medium severity (CVSS 6.2, AV:L) and shipped a fix in v26.5.1 on 2026-07-29 as part of a broader security release addressing ten CVEs. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Stored cross-site scripting in the Gridbox Joomla extension by balbooa.com allows attackers to inject persistent malicious scripts via the comment avatar field, affecting all releases from version 1.0.0 through 2.20.1. The payload is stored server-side and executes in the browsers of all subsequent visitors who load the affected page, with scope change enabling cross-origin impact such as session theft or UI manipulation. No public exploit code or active exploitation has been identified at time of analysis; the vendor released version 2.20.2 as the corrective fix.
Node.js Permission Model fails to enforce filesystem write restrictions for the trace events subsystem, allowing a local attacker with low privileges to write files to paths explicitly blocked by the operator via the --experimental-permission flag. Rated Low severity (CVSS 3.3), this flaw affects Node.js 22.x through 22.23.1, 24.x through 24.18.0, and 26.x through 26.5.0, and is one of ten CVEs addressed in the July 2026 Node.js security release. No public exploit code has been identified and the vulnerability is not listed in CISA KEV; the fix is available in Node.js 26.5.1 released 2026-07-29.
Cross-site scripting vulnerabilities in RO CSVI's AJAX endpoint handlers allow unauthenticated remote attackers to inject malicious scripts into the browsers of Joomla site users. All versions from 1.0.0 up to (but not including) 9.11.0 are affected. No public exploit code or active exploitation has been identified at time of analysis, though the CVSS scope-changed vector (S:C) and absence of authentication requirement make this an accessible attack for opportunistic threat actors targeting Joomla deployments running the extension.
Reflected or stored cross-site scripting in Sourcecodester Fantastic Blog CMS 1.0 allows network-accessible attackers to inject malicious scripts via the address field in pageEditMember.php, executing arbitrary JavaScript in a victim's browser session. The Changed scope (S:C) in the CVSS vector confirms the injected script escapes the page context and can affect the victim's broader browser environment, enabling session hijacking or credential theft. EPSS stands at 0.14% (4th percentile), and no CISA KEV listing exists, though exploit documentation is publicly available via the TaintRadar research repository on GitHub.
Cross-origin credential header leakage in linuxfabrik-lib prior to v6.0.0 exposes API tokens from authenticated monitoring requests to attacker-controlled redirect targets. The lib.url.fetch() function relied on httpx's default redirect behavior, which strips only Authorization and Cookie on cross-origin hops - leaving custom credential headers like X-Auth-Token and X-Api-Key forwarded verbatim to whatever host the redirect points to. This is particularly severe for Redfish/BMC monitoring workflows where X-Auth-Token grants privileged hardware management access. No public exploit has been identified at time of analysis, and active exploitation is not confirmed in CISA KEV.
Uncontrolled resource consumption in Node.js 26.x DNS module allows a network-positioned attacker to trigger a denial-of-service condition by delivering an oversized `resolveAny` DNS reply to an affected application. The vulnerability (CWE-400) was patched in Node.js v26.5.1 released 2026-07-29 as part of a broader security release addressing ten CVEs. No public exploit code and no CISA KEV listing have been identified; the CVSS AC:H metric reflects the prerequisite of controlling or spoofing DNS responses reaching the target process.
Symlink-following in Linuxfabrik monitoring-plugins 6.0.0 allows a local low-privileged user sharing the plugin account to overwrite or corrupt arbitrary root-owned files. The logfile check's legacy database migration resolved a predictable /tmp path via os.rename() without guarding against symlink substitution, and sqlite3.connect() would then follow the attacker-planted link during a root-executed check run. No public exploit has been identified, and exploitation is additionally constrained by the non-default kernel setting fs.protected_symlinks=0, meaningfully reducing real-world risk on hardened systems.
Path traversal in pip (CWE-36) allows a malicious package index to write downloaded wheel files to arbitrary filesystem locations outside the intended download directory. The root cause is pip's `Link.filename` property double-decoding percent-encoded URL path segments, letting an attacker embed encoded path separators that survive initial URL parsing but resolve during the second `urllib.parse.unquote()` call. Practical impact is most material for `pip download --only-binary` workflows pointed at untrusted indexes; no public exploit or active exploitation has been identified at time of analysis.
Certificate trust bypass in S2OPC versions 1.5.0 through 1.x (prior to 2.0.0) allows a remote attacker to have certificates signed by an expired root CA accepted as fully trusted due to missing validity period enforcement in the CycloneCrypto wrapper layer. The flaw affects OPC UA communications protected by this library, enabling potential interception or tampering of industrial protocol traffic. No public exploit code has been identified at time of analysis, and the vulnerability has not been added to the CISA KEV catalog.
Missing authorization in Keycloak's administrative API allows a scoped administrator to exceed their privilege boundary by linking identity providers to organizations they are not authorized to manage. Affected deployments include Red Hat Build of Keycloak, Red Hat Single Sign-On 7, and related Red Hat products. An administrator who holds identity provider management permissions but lacks organization management rights can silently reconfigure authentication flows for organizations outside their administrative scope, potentially redirecting user logins through attacker-controlled providers. No public exploit code exists and this vulnerability is not listed in CISA KEV at time of analysis.
Directory traversal in DriveLock's built-in web service (TCP port 4568) permits unauthenticated remote attackers to read arbitrary files in the context of the service account, bypassing all authentication controls. The root cause is unsanitized user-supplied path input passed directly into file operations (CWE-22), making exploitation mechanically trivial for any attacker with network reach to the affected port. No public exploit code or active exploitation has been identified at time of analysis; the ZDI-CAN-28719 disclosure was handled through the Zero Day Initiative responsible disclosure program.
Out-of-bounds read in Autodesk AutoCAD, AutoCAD LT, and DWG TrueView is triggered when parsing maliciously crafted DWG or DXF files, potentially resulting in application crash or memory disclosure. The attack requires a user to open a weaponized design file, making social engineering the primary delivery mechanism. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; a vendor-released patch is available via Autodesk advisory ADSK-SA-2026-0009.
Sensitive information disclosure in GitLab EE's virtual registries feature allows low-privileged authenticated users to trigger improper forwarding of upstream requests, potentially exposing sensitive data - such as credentials or authentication headers - to unintended hosts. All GitLab EE versions from 18.8 through pre-19.2.1 are affected, with patched releases now available at 19.0.5, 19.1.3, and 19.2.1. No public exploit code has been identified and this vulnerability does not appear in CISA KEV, indicating no confirmed active exploitation at time of analysis.
Open redirect in Dify's OAuth flow enables remote attackers to hijack post-authentication redirections, sending users to attacker-controlled sites that can harvest OAuth tokens or credentials. The flaw resides in the AppInitializer component's oauth_redirect_url handling, where the redirect destination is not validated against an allowlist. Exploitation requires user interaction - a target must follow a crafted link - but no authentication is required of the attacker, making phishing-based delivery straightforward. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Exposure of hard-coded AWS IAM credentials in Koollab LMS 5.3.2 allows authenticated attackers with low privileges to access shared multi-tenant S3 buckets and SQS queues, leading to sensitive data disclosure, content injection, and job manipulation. No public exploit or active exploitation has been identified at the time of analysis.
The built-in sqlite module in Node.js 26.x before v26.5.1 fails to invalidate tag store iterators when a prepared statement is reset, creating a TOCTOU window that a network-reachable, unauthenticated attacker (requiring user interaction) can abuse to achieve high integrity impact against the affected application. Fixed in Node.js v26.5.1 released 2026-07-29 by Matteo Collina. No public exploit code exists and no CISA KEV listing is present at time of analysis; however, the High integrity impact (I:H) in the CVSS vector warrants prompt patching for any application actively using the Node.js built-in sqlite module.
Missing authorization in MWDB Core versions 2.0.0 through 2.18.x allows any authenticated user to bypass capability-based access controls and upload malware configuration and text blob objects they are not permitted to add. The deprecated legacy endpoints `/config/<parent_dhash>` and `/blob/<parent_dhash>` silently accept an undocumented POST method that carries none of the `adding_configs` or `adding_blobs` capability checks enforced on the documented PUT method. No public exploit code has been identified and this vulnerability is not listed in CISA KEV, but the low attack complexity and network accessibility make it a meaningful privilege-boundary bypass in any multi-user MWDB Core deployment. Vendor-released patch v2.19.0 resolves the issue.
Rate-limit bypass in @fastify/rate-limit before 11.2.0 lets IPv6-capable clients defeat request throttling by rotating source addresses across a controlled /64 range or by re-encoding the same address in different textual forms, because buckets are keyed on the verbatim request.ip string. Applications relying on this plugin to protect authentication, password-reset, OTP, or expensive API endpoints can be brute-forced or abused when trustProxy is enabled and IPv6 reaches the origin. No public exploit identified at time of analysis; the flaw is fixed in 11.2.0 via IPv6 canonicalization and a default /64 prefix mask.
Approval bypass in GitLab Enterprise Edition allows authenticated users to merge code into protected branches without satisfying required approval rules by exploiting a race condition in the approval rule processing pipeline. Affected deployments span GitLab EE versions 17.0 through 19.2, with fixed releases available at 19.0.5, 19.1.3, and 19.2.1. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, though the integrity risk is significant in regulated environments where protected branch approvals serve as a primary code integrity control.
The BGR decoder in ImageMagick prior to 7.1.2-27 fails to check for end-of-file at all necessary code paths, allowing remote unauthenticated attackers to trigger a heap buffer over-read via a crafted image file. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) confirms network-exploitable, zero-prerequisite access with impact limited to partial memory disclosure. No active exploitation (CISA KEV) and no public POC have been identified at the time of analysis; a vendor-released patch is available in version 7.1.2-27.
IP-based security controls in applications using @fastify/forwarded before 3.0.2 can be bypassed by injecting a horizontal tab character into X-Forwarded-For header entries. The parser strips only space characters during whitespace normalization, violating RFC 7230's definition of optional whitespace (which includes both SP and HTAB), causing the resolved IP string to carry a trailing tab. Any application performing exact-string security decisions on the resolved address - allowlists, blocklists, per-IP rate limit keys, or audit log correlation - will silently fail to match the expected value, allowing an attacker to evade those controls. No public exploit has been identified at time of analysis, and no KEV listing exists; however, exploitation requires no authentication or special configuration beyond controlling HTTP request headers.
Payment bypass in Gridbox (Joomla extension by balbooa.com) versions 1.0.0 through 2.20.1 allows unauthenticated remote attackers to circumvent payment enforcement due to improper authorization checks (CWE-285), enabling acquisition of paid content or order completion without payment. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms this is remotely exploitable with no authentication or user interaction required. No public exploit has been identified at time of analysis, though SSVC designates the attack as automatable with partial technical impact, raising concerns about systematic financial fraud at scale.
Unauthenticated file system disclosure in balbooa.com's Gridbox extension for Joomla (versions 1.0.0 through 2.20.1) exposes arbitrary server-side file paths to remote unauthenticated attackers via multiple vulnerable endpoints. The CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N confirms zero-barrier network exploitation requiring no credentials, interaction, or special configuration. SSVC assesses exploitation as none at time of analysis and the attack as automatable with partial technical impact; EPSS at 0.14% (4th percentile) reflects currently low exploitation probability despite the accessible attack surface. No public exploit code or active exploitation (CISA KEV) has been identified.
Unauthenticated settings hijacking in the Klubraum Membership Request WordPress plugin (versions ≤1.1.0) allows any remote attacker to overwrite the plugin's Klubraum API token and configuration by invoking the unprotected `kr_mr_store_settings()` function. Substituting the API token with an attacker-controlled value effectively redirects club membership request data to an adversary's Klubraum account, constituting full service integration takeover. No public exploit or CISA KEV listing is identified at time of analysis, but the zero-authentication, low-complexity attack surface makes this trivially exploitable against any reachable WordPress installation running the plugin.