Omar Elshopky

**Name of the Vulnerable Software and Affected Versions** Subscribe2 versions prior to 10.46 **Description** Insufficient escaping of user-supplied values before they are reflected into a public subscription form allows Reflected Cross-Site Scripting (XSS). This occurs when an unauthenticated visitor interacts with the form via a crafted link, executing malicious scripts in their browser. The issue is triggered through the `email` parameter. **Recommendations** Update Subscribe2 to version 10.46 or later. Avoid using the `email` parameter in the subscription form until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Clearfy Cache WordPress plugin versions prior to 2.4.3 **Description** Users with administrator access can perform PHP Object Injection attacks because the plugin does not restrict the classes allowed when unserializing settings-import data. This may lead to remote code execution if a suitable gadget chain is present in the environment. PHP Object Injection is a vulnerability that occurs when untrusted input is passed to the `unserialize()` function, allowing an attacker to manipulate the object's properties or trigger unexpected code execution. **Recommendations** Update the plugin to version 2.4.3 or later.

**Name of the Vulnerable Software and Affected Versions** LWS Optimize versions prior to 3.4 **Description** The LWS Optimize WordPress plugin fails to perform a capability check on its cache-clearing actions. This allows any authenticated user, including those with Subscriber privileges, to flush the site caches and force repeated cache rebuilds. **Recommendations** Update LWS Optimize to version 3.4 or later.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** Improper authorization occurs when manipulating the '/callrec/pci dss status.jsp' endpoint, allowing for remote exploitation. **Recommendations** Restrict access to the '/callrec/pci dss status.jsp' file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** An issue exists in the `/callrec/composeEmailAction.do` endpoint that allows remote attackers to perform a manipulation leading to improper authorization. Improper authorization occurs when a system fails to properly verify if a user has the necessary permissions to access a resource or perform an action. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `/callrec/composeEmailAction.do` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** An issue exists in the Recorded Calls Page component where improper processing of the '/callrec/restoreCallAction.do' endpoint allows for improper authorization. This flaw can be exploited remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** An improper authorization issue exists within the Call Recording Handler component. A remote attacker can manipulate the `callId` argument in the '/callrec/audio.jsp' endpoint to bypass authorization controls. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** An improper authorization issue exists in the `/callrec/group.jsp` endpoint. This flaw allows a remote attacker to manipulate unknown functionality within the specified file to bypass authorization controls. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `/callrec/group.jsp` file to minimize the risk of exploitation.

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. This impacts an unknown function of the file /callrec/users ldap.jsp of the component LDAP User Interface. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** A flaw in the Group Interface component allows remote attackers to achieve improper authorization through manipulation of the '/callrec/roleAddAction.do' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the '/callrec/roleAddAction.do' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** An improper authorization issue exists in the `/callrec/statisticReportAction.do` endpoint. This flaw allows a remote attacker to manipulate the system, potentially gaining unauthorized access or performing restricted actions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `/callrec/statisticReportAction.do` endpoint to minimize the risk of exploitation.

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. Affected by this vulnerability is an unknown functionality of the file /callrec/sendlogfile. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** An improper authorization issue exists in the `/callrec/userAddAction.do` endpoint. A remote attacker can manipulate the `role` argument to bypass authorization controls. **Recommendations** Avoid using the `role` argument in the `/callrec/userAddAction.do` endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LWS Optimize – All-in-One Speed Booster & Cache Tools versions prior to 3.3.20 **Description** The plugin is subject to an arbitrary file read issue. This occurs because the `combine current css()` function trusts values harvested from page HTML and converts same-site URLs to absolute filesystem paths before reading them using `file get contents()` or `MinifyCSS::add()`. The process fails to ensure that the resolved path remains within the `ABSPATH` or possesses a `.css` extension. Consequently, authenticated attackers with Editor-level access or higher can read arbitrary files on the system. **Recommendations** Update to a version later than 3.3.19. As a temporary workaround, restrict access to the `combine current css()` function for users with Editor-level permissions until the update is applied.