Stored Cross-Site Scripting Vulnerability in Integrate Dynamics 365 CRM Plugin for WordPress

CVE-2026-0725

What is CVE-2026-0725?

The Integrate Dynamics 365 CRM plugin for WordPress allows authenticated users with Administrator-level access to exploit a stored cross-site scripting vulnerability. This occurs due to inadequate sanitization and escaping of user-provided attributes within admin settings, enabling attackers to inject harmful scripts. These scripts will execute whenever the compromised pages are accessed by users, potentially leading to unauthorized actions and data exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References