https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:29:49.309095+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-342282 EUVD-2026-342282 2026-10-08T20:29:49.311261+00:00 EUVD-2026-342282 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4604 fkie_cve-2026-4604 2026-10-08T20:29:49.311295+00:00

The Klubraum Membership Request plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `kr_mr_store_settings()` function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to update the plugin's settings, including the Klubraum API token and introduction text, effectively hijacking the plugin's integration with the Klubraum service.

 https://cve.radiocsirt.org/vuln/ghsa-fwgq-wmqx-h49q GHSA-fwgq-wmqx-h49q 2026-10-08T20:29:49.311329+00:00

The Klubraum Membership Request plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `kr_mr_store_settings()` function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to update the plugin's settings, including the Klubraum API token and introduction text, effectively hijacking the plugin's integration with the Klubraum service.