Log in Start free

AlexaCRM

Products

ProductCVEsExploitedLatest
Dynamics 365 Integration4–Jan 4, 2025
Dataverse Integration1–Jul 24, 2025

Exploited and recent CVEs

  • CVE-2025-7695 High 8.8 Dataverse Integration 2.77 - 2.81 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST Route 0.7%
  • CVE-2024-12583 Critical 9.9 Dynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection 1.4%
  • CVE-2023-28417 Medium 5.4 WordPress Dynamics 365 Integration plugin <= 1.3.12 - Broken Access Control vulnerability 0.4%
  • CVE-2023-29422 Medium 4.3 WordPress Dynamics 365 Integration plugin <= 1.3.13 - Broken Access Control vulnerability 0.4%
  • CVE-2024-34550 Medium 5.3 WordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerability 0.6%