Known vulnerabilities in Facebook for WooCommerce
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-66707 | Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions | 7.1 High | Aug 6, 2026 |
| CVE-2026-49059 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Facebook Facebook for WooCommerce allows Phishing | 4.7 Medium | May 27, 2026 |
| CVE-2025-64296 | Missing Authorization vulnerability in Facebook Facebook for WooCommerce facebook-for-woocommerce allows Exploiting… | 5.3 Medium | Oct 29, 2025 |