7.1
High
CVE-2026-66705 Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions
Description
Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Facebook for WordPress 5.2 | earliest → 5.2.1 | No fix stated |