FA
Product
Facebook
by Facebook · last CVE Apr 12, 2021
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add Facebook to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-24218
8.8
1%
Apr 12
The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce…
Affected: 3.0.0 before 3.0.4
CVE-2021-24217
8.1
4%
Apr 12
The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object…
Affected: before 3.0.0
Showing 2