Unauthorized Access Vulnerability in Integrate Dynamics 365 CRM Plugin for WordPress

CVE-2025-10746

What is CVE-2025-10746?

The Integrate Dynamics 365 CRM plugin for WordPress is exposed due to inadequate checks on user capabilities and nonce verification. This flaw permits unauthorized users to deactivate essential plugin functions, alter OAuth configuration settings, and initiate test connections that could potentially reveal sensitive information through crafted malicious requests to vulnerable endpoints. All versions up to and including 1.0.9 are susceptible, making it crucial for users to apply security patches and updates promptly.

References