Facebook Facebook vulnerabilities

• facebook for woocommerce WordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-66707 7.1 HighAugust 6, 2026
• facebook for wordpress, unknown facebook for wordpress +1 more WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-66705 7.1 HighAugust 6, 2026
• facebook for woocommerce WordPress Facebook for WooCommerce plugin <= 3.7.0 - Open Redirection vulnerability CVE-2026-49059 4.7 MediumMay 27, 2026
• facebook for woocommerce WordPress Facebook for WooCommerce plugin <= 3.5.7 - Broken Access Control to Notice Dismissal vulnerability CVE-2025-64296 5.3 MediumOctober 29, 2025
• facebook chat plugin – live chat plugin for wordpress Facebook Chat Plugin <= 1.5 - Missing Capabilities Check CVE-2020-36838 7.4 HighOctober 16, 2024
• facebook thrift A null-dereference vulnerability involving parsing requests specifying invalid protocols can... CVE-2024-45863 5.3 MediumSeptember 27, 2024
• facebook thrift A use-after-free vulnerability involving upgradeToRocket requests can cause the application to... CVE-2024-45773 Fix available 7.5 HighSeptember 27, 2024
• facebook github.com/huandu/facebook may expose access_token in error message CVE-2024-35232 Fix available 3.7 LowMay 24, 2024
• facebook thrift An invalid free in Thrift's table-based serialization can cause the application to crash or... CVE-2021-24028 9.8 CriticalApril 13, 2021
• facebook, unknown facebook for wordpress +1 more Facebook for WordPress 3.0.0-3.0.3 - CSRF to Stored XSS and Settings Deletion CVE-2021-24218 8.8 HighApril 12, 2021
• facebook, unknown facebook for wordpress +1 more Facebook for WordPress < 3.0.0 - PHP Object Injection with POP Chain CVE-2021-24217 8.1 HighApril 12, 2021
• facebook gameroom The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote... CVE-2021-24030 9.8 CriticalMarch 10, 2021
• facebook thrift Golang Facebook Thrift servers vulnerable to denial of service CVE-2019-11939 Fix available 7.5 HighMarch 18, 2020
• facebook thrift C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes... CVE-2019-3553 7.5 HighMarch 10, 2020
• facebook thrift Java Facebook Thrift servers would not error upon receiving messages declaring containers of... CVE-2019-11938 7.5 HighMarch 10, 2020
• facebook for woocommerce The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via... CVE-2019-15841 8.8 HighAugust 30, 2019
• facebook for woocommerce The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF. CVE-2019-15840 8.8 HighAugust 30, 2019
• facebook thrift Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving... CVE-2019-3565 Fix available 7.5 HighMay 6, 2019
• facebook thrift Improper Input Validation and Excessive Iteration in Go Facebook Thrift CVE-2019-3564 Fix available 7.5 HighMay 6, 2019
• facebook thrift Java Facebook Thrift servers would not error upon receiving messages with containers of fields of... CVE-2019-3559 7.5 HighMay 6, 2019
• facebook thrift Python Facebook Thrift servers would not error upon receiving messages with containers of fields... CVE-2019-3558 7.5 HighMay 6, 2019
• facebook thrift C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers... CVE-2019-3552 7.5 HighMay 6, 2019
• facebook, facebook messenger +1 more ** DISPUTED ** Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook... CVE-2014-6392 Disputed 4.3 MediumSeptember 15, 2014
• aurigma image uploader activex control, facebook, facebook photouploader +2 more Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4... CVE-2008-0660 Public exploit EPSS 37.8% 9.3 HighFebruary 8, 2008