Omar Elshopky

The Clearfy Cache WordPress plugin before 2.4.3 does not restrict the classes allowed when unserializing settings-import data, allowing users with administrator access to perform PHP Object Injection attacks, which may lead to remote code execution when a suitable gadget chain is present in the environment.

The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowing any authenticated user, including Subscribers, to flush the site's caches and force repeated cache rebuilds.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** Improper authorization occurs when manipulating the '/callrec/pci dss status.jsp' endpoint, allowing for remote exploitation. **Recommendations** Restrict access to the '/callrec/pci dss status.jsp' file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** An improper authorization issue exists within the Call Recording Handler component. A remote attacker can manipulate the `callId` argument in the '/callrec/audio.jsp' endpoint to bypass authorization controls. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** An issue exists in the Recorded Calls Page component where improper processing of the '/callrec/restoreCallAction.do' endpoint allows for improper authorization. This flaw can be exploited remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** An issue exists in the `/callrec/composeEmailAction.do` endpoint that allows remote attackers to perform a manipulation leading to improper authorization. Improper authorization occurs when a system fails to properly verify if a user has the necessary permissions to access a resource or perform an action. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `/callrec/composeEmailAction.do` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** An improper authorization issue exists in the `/callrec/group.jsp` endpoint. This flaw allows a remote attacker to manipulate unknown functionality within the specified file to bypass authorization controls. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `/callrec/group.jsp` file to minimize the risk of exploitation.

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. Affected by this vulnerability is an unknown functionality of the file /callrec/sendlogfile. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** An improper authorization issue exists in the `/callrec/statisticReportAction.do` endpoint. This flaw allows a remote attacker to manipulate the system, potentially gaining unauthorized access or performing restricted actions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `/callrec/statisticReportAction.do` endpoint to minimize the risk of exploitation.

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. This impacts an unknown function of the file /callrec/users ldap.jsp of the component LDAP User Interface. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** A flaw in the Group Interface component allows remote attackers to achieve improper authorization through manipulation of the '/callrec/roleAddAction.do' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the '/callrec/roleAddAction.do' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Eleveo Call Recording Software version 9.7.0 **Description** An improper authorization issue exists in the `/callrec/userAddAction.do` endpoint. A remote attacker can manipulate the `role` argument to bypass authorization controls. **Recommendations** Avoid using the `role` argument in the `/callrec/userAddAction.do` endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LWS Optimize – All-in-One Speed Booster & Cache Tools versions prior to 3.3.20 **Description** The plugin is subject to an arbitrary file read issue. This occurs because the `combine current css()` function trusts values harvested from page HTML and converts same-site URLs to absolute filesystem paths before reading them using `file get contents()` or `MinifyCSS::add()`. The process fails to ensure that the resolved path remains within the `ABSPATH` or possesses a `.css` extension. Consequently, authenticated attackers with Editor-level access or higher can read arbitrary files on the system. **Recommendations** Update to a version later than 3.3.19. As a temporary workaround, restrict access to the `combine current css()` function for users with Editor-level permissions until the update is applied.