WordPress plugin Dynamics 365 Integration 安全漏洞

🗓️ 04 Jan 2025 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

Security flaw in WP Dynamics 365 Integration plugin up to v1.3.23 enables remote code execution and file reading.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-12583	4 Jan 202508:23	–	circl
CVE	CVE-2024-12583	4 Jan 202508:22	–	cve
Cvelist	CVE-2024-12583 Dynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection	4 Jan 202508:22	–	cvelist
EUVD	EUVD-2024-50974	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12583	4 Jan 202509:15	–	nvd
Patchstack	WordPress Dynamics 365 Integration plugin <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection vulnerability	3 Jan 202522:30	–	patchstack
Positive Technologies	PT-2025-1899 · Microsoft · Dynamics 365 Integration Plugin For Wordpress	4 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-12583	5 Feb 202510:35	–	redhatcve
The Hacker News	⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [6 Jan]	6 Jan 202512:05	–	thn
Vulnrichment	CVE-2024-12583 Dynamics 365 Integration <= 1.3.23 - Authenticated (Contributor+) Remote Code Execution and Arbitrary File Read via Twig Server-Side Template Injection	4 Jan 202508:22	–	vulnrichment

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/integration-dynamics/trunk/src/Shortcode/Twig.php
plugins	www.plugins.trac.wordpress.org/changeset/3210927/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/7f3dac5a-9ff8-4e8c-8c73-422123e121d8

31 Dec 2025 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 3.19.9

EPSS0.1192

SSVC

WordPress plugin Dynamics 365 Integration Remote code execution File reading