Vulnerabilities in AlexaCRM
5 resultsCVE-2024-12583CRITICALDynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template InjectionEPSS 1.4%CVE-2024-34550MEDIUMWordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerabilityEPSS 0.6%CVE-2025-7695HIGHDataverse Integration 2.77 - 2.81 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST RouteEPSS 0.6%CVE-2023-29422MEDIUMWordPress Dynamics 365 Integration plugin <= 1.3.13 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-28417MEDIUMWordPress Dynamics 365 Integration plugin <= 1.3.12 - Broken Access Control vulnerabilityEPSS 0.4%