Klubraum Membership Request
Monthly
Unauthenticated settings hijacking in the Klubraum Membership Request WordPress plugin (versions ≤1.1.0) allows any remote attacker to overwrite the plugin's Klubraum API token and configuration by invoking the unprotected `kr_mr_store_settings()` function. Substituting the API token with an attacker-controlled value effectively redirects club membership request data to an adversary's Klubraum account, constituting full service integration takeover. No public exploit or CISA KEV listing is identified at time of analysis, but the zero-authentication, low-complexity attack surface makes this trivially exploitable against any reachable WordPress installation running the plugin.
Unauthenticated settings hijacking in the Klubraum Membership Request WordPress plugin (versions ≤1.1.0) allows any remote attacker to overwrite the plugin's Klubraum API token and configuration by invoking the unprotected `kr_mr_store_settings()` function. Substituting the API token with an attacker-controlled value effectively redirects club membership request data to an adversary's Klubraum account, constituting full service integration takeover. No public exploit or CISA KEV listing is identified at time of analysis, but the zero-authentication, low-complexity attack surface makes this trivially exploitable against any reachable WordPress installation running the plugin.