Skip to content
OpenAdvisories

Vendor

alexacrm

5 known vulnerabilities.

Products

Dynamics 365 Integration 4 Dataverse Integration 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-7695

    Dataverse Integration 2.77 - 2.81 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST Route

    The Dataverse Integration plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks within its reset_password_link REST endpoint in versions 2.77 through 2.81. The endpoint’s handler accepts a client-supplied id, email, or…

    alexacrm Dataverse Integration Web / CMS