Medium · 4.7 CVE-2026-49059 EUVD-2026-32529GHSA-6f96-4hg2-638g

WordPress Facebook for WooCommerce plugin <= 3.7.0 - Open Redirection vulnerability

Published May 27, 2026 · Updated May 28, 2026 · Assigned by Patchstack

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Facebook Facebook for WooCommerce allows Phishing.

This issue affects Facebook for WooCommerce: from n/a through 3.7.0.

Vendor	Product	Affected	Fixed
Facebook	Facebook for WooCommerce	≤ 3.7.0	—