FA
Product
Facebook
by Facebook · last CVE Apr 12, 2021
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add Facebook to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-24218
8.8
1%
Apr 12
The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce…
Affected: 3.0.0 before 3.0.4
CVE-2021-24217
8.1
4%
Apr 12
The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object…
Affected: before 3.0.0
CVE-2014-6392
–
1%
Sep 15
Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a…
Affected: 14.0
CVE-2008-0660
–
38%
Feb 8
Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by…
Affected: All versions, or not specified
Showing 4