Skip to content
Sign in
5.3 Medium

CVE-2025-64296 Missing Authorization vulnerability in Facebook Facebook for WooCommerce facebook-for-woocommerce allows Exploiting…

Description

Missing Authorization vulnerability in Facebook Facebook for WooCommerce facebook-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Facebook for WooCommerce: from n/a through <= 3.5.7.

Affected products and versions

Product Affected versions Fixed in
Facebook for WooCommerce 3.5 earliest → 3.5.7 No fix stated

Other CVEs of Facebook for WooCommerce

The 3 CVEs of Facebook for WooCommerce →
CVE-2026-66707 Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions 7.1 High CVE-2026-49059 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Facebook Facebook for WooCommerce allows Phishing 4.7 Medium
Track this CVE