CyberSecBulletin

AlexaCRM vulnerabilities

We track 2 vulnerabilities in AlexaCRM products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 24, 2025.

2vulnerabilities
1critical
1high
0exploited
9.4average CVSS score

Latest AlexaCRM vulnerabilities

  • 8.8 High severity

    Dataverse Integration: Missing Authorization

    CVE-2025-7695AlexaCRM

    The Dataverse Integration plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks within its reset_password_link REST endpoint in versions 2.77 through 2.81. The endpoint’s handler accepts a client-supplied id, email, or

  • 9.9 Critical severity

    Dynamics 365 Integration: Improper Neutralization of Special Elements Used in a Template Engine

    CVE-2024-12583AlexaCRMEPSS 1.38%

    The Dynamics 365 Integration plugin for WordPress is vulnerable to Remote Code Execution and Arbitrary File Read in all versions up to, and including, 1.3.23 via Twig Server-Side Template Injection. This is due to missing input validation and sanitization on t