Login Request a demo
FF
Product
Facebook for WooCommerce
by Facebook · last CVE Aug 6, 2026
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities4Critical0High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Facebook for WooCommerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-15841
8.8
1%
Aug 30
The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, or ajax_fb_toggle_visibility
Affected: before 1.9.15
CVE-2019-15840
8.8
1%
Aug 30
The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF
Affected: before 1.9.14
CVE-2026-66707
7.1
0%
Aug 6
WordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.7.5
CVE-2026-49059
4.7
0%
May 27
WordPress Facebook for WooCommerce plugin <= 3.7.0 - Open Redirection vulnerability
Affected: through 3.7.0
Showing 4