Unauthorized Access Vulnerability in Integrate Dynamics 365 CRM Plugin for WordPress

CVE-2025-10746

What is CVE-2025-10746?

The Integrate Dynamics 365 CRM plugin for WordPress is exposed due to inadequate checks on user capabilities and nonce verification. This flaw permits unauthorized users to deactivate essential plugin functions, alter OAuth configuration settings, and initiate test connections that could potentially reveal sensitive information through crafted malicious requests to vulnerable endpoints. All versions up to and including 1.0.9 are susceptible, making it crucial for users to apply security patches and updates promptly.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References