High · 7.1 CVE-2026-66705 EUVD-2026-53908GHSA-w2c9-5gcq-r387

WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability

Published Aug 6, 2026 · Updated Aug 6, 2026 · Assigned by Patchstack

Vendor: Facebook Product: Facebook for WordPress Category: Web / CMS

Description

Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.

Affected products

Vendor	Product	Affected	Fixed
Facebook	Facebook for WordPress	≤ 5.2.1	—

References

https://patchstack.com/database/wordpress/plugin/official-facebook-pixel/vulnerability/wordpress-facebook-for-wordpress-plugin-5-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry