All 4 CVE vulnerabilities found in Dynamics 365 Integration, with AI-generated Chinese analysis, references, and POCs.
Vendor: AlexaCRM
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-12583 | Dynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection CWE-1336 | 9.9 | Critical | 2025-01-04 |
| CVE-2023-28417 | WordPress Dynamics 365 Integration plugin <= 1.3.12 - Broken Access Control vulnerability CWE-862 | 5.4 | Medium | 2024-12-09 |
| CVE-2023-29422 | WordPress Dynamics 365 Integration plugin <= 1.3.13 - Broken Access Control vulnerability CWE-862 | 4.3 | Medium | 2024-12-09 |
| CVE-2024-34550 | WordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerability CWE-532 | 5.3 | Medium | 2024-05-09 |
All 4 known CVE vulnerabilities affecting Dynamics 365 Integration with full Chinese analysis, references, and POCs where available.