DataPress (Dataverse Integration)

DataPress (Dataverse Integration) has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for DataPress (Dataverse Integration) has a vendor fix available, so running the current release closes it.

All of these findings were reported by kr0d. DataPress (Dataverse Integration) is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh
8.8/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all DataPress (Dataverse Integration) vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2025-7695

Dataverse Integration 2.77 - 2.81 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST Route

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv2.95.1

DataPress (Dataverse Integration)

alexacrm

Author

alexacrm

5.0(6)
100/100
Last Updated
2026-08-14 (1mo ago)
Active Installs
90+
Downloads
18,911
Requires WP
6.1+
Requires PHP
8.2+
Tested up to
WP 7.0.4
Created
2019-05-16 (7y ago)

This plugin directly connects WordPress with Dataverse / Dynamics 365 / CRM, creating powerful portal solutions for your business. Dataverse lets you securely store and manage data that’s used by business applications. Data from your Dynamics 365 applications is also stored in Dataverse allowing you to quickly build apps which leverage your Dynamics 365 data and extend your apps using Power Apps. The plugin extends Microsoft Power Platform to WordPress and provides full access to the data. Written from ground-up, the plugin uses Web API to communicate with Dataverse. Features 100% Web API-based – future-proof investment. Secure server-to-server authentication. No more usernames or passwords. Create custom forms in WordPress and map them to Dataverse tables and columns for create or update operations. Write data from the forms directly to Dataverse / Dynamics 365. Collect leads, contact requests, support queries and much more without any coding. Query Dataverse / Dynamics 365 records using FetchXML language. Give your customers direct access to product catalogs, event lists, knowledge base articles. Create custom layouts for Dataverse / Dynamics 365 data using powerful and flexible Twig template engine. Display data directly from Dataverse / Dynamics 365 without any coding. Bind WordPress posts and pages to Dataverse / Dynamics 365 records. Build a customized record view in WordPress like product information sheets, event details, or customer profiles. Extensible through WordPress actions and filters. Requirements This plugin requires PHP 8.2 or greater. cURL and intl extensions are required as well. Documentation Plugin documentation is available at docs.alexacrm.com/. Disclaimer For this plugin to work, access to a working Dataverse or Dynamics 365 instance is required. Please, do not raise issues related to that. If you are curious to try, you can always sign up for a free trial of Power Apps or Dynamics 365. To explore full plugin capabilities including premium features we recommend using a Dataverse developer environment.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C