Riccardo Ten Cate

**Name of the Vulnerable Software and Affected Versions** Chuango 433 MHz burglar-alarm product line (affected versions not specified) Eminent EM8617 OV2 Wifi Alarm System (affected versions not specified) **Description** The issue allows for a Denial of Service attack. When the condition is triggered, the OV2 base station is unable to process sensor states, effectively preventing the alarm from setting off. **Recommendations** For the Chuango 433 MHz burglar-alarm product line, at the moment, there is no information about a newer version that contains a fix for this issue. For the Eminent EM8617 OV2 Wifi Alarm System, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Chuango 433 MHz burglar-alarm product line (affected versions not specified) Eminent EM8617 OV2 Wifi Alarm System (affected versions not specified) **Description** The issue concerns the use of static codes in the RF remote control of the affected products, allowing an attacker to perform unauthorized actions such as arming, disarming, or triggering the alarm remotely through replay attacks. **Recommendations** For the Chuango 433 MHz burglar-alarm product line, consider implementing a code-hopping or rolling code mechanism to prevent replay attacks until a patch is available. For the Eminent EM8617 OV2 Wifi Alarm System, restrict access to the alarm system's remote control functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WP Live Chat Support Pro plugin versions prior to 8.0.07 **Description** The issue allows for unauthenticated Remote Code Execution due to inadequate validation of file types on the client-side. This can be exploited by sending a request to the "v1/remote upload" endpoint with a filename having a .php extension and specifying the content type as `image/jpeg`. **Recommendations** For versions prior to 8.0.07, update to version 8.0.07 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** wp-live-chat-support plugin versions prior to 8.0.08 **Description** The issue is related to stored cross-site scripting in the wp-live-chat-support plugin for WordPress. This occurs via the `name` (aka `wplc name`) and `email` (aka `wplc email`) input fields to the "/wp-json/wp live chat support/v1/start chat" API endpoint whenever a malicious attacker initiates a new chat with an administrator. **Recommendations** For versions prior to 8.0.08, update to version 8.0.08 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/wp-json/wp live chat support/v1/start chat" API endpoint to minimize the risk of exploitation. Additionally, avoid using the `wplc name` and `wplc email` input fields in the affected API endpoint until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: User Profile & Membership plugin versions prior to 2.0.7 Description: The issue concerns the lack of mitigations against cross-site request forgery attacks in the plugin. This is a structural finding throughout the entire plugin, indicating a fundamental weakness in its design. Recommendations: For versions prior to 2.0.7, update to version 2.0.7 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: User Profile & Membership plugin versions prior to 2.0.11 Description: An issue exists in the User Profile & Membership plugin for WordPress, where authenticated cross-site scripting is possible. This is due to a vulnerability in the `Account Deletion Custom Text` input field, which is accessible on the `wp-admin/admin.php?page=um options&section=account` page. Recommendations: For versions prior to 2.0.11, update to version 2.0.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the `wp-admin/admin.php?page=um options&section=account` page until the update is applied. Avoid using the `Account Deletion Custom Text` input field in the affected plugin until the issue is resolved.