Facebook for WordPress 3.0.0-3.0.3 - CSRF to Stored XSS and Settings Deletion

🗓️ 25 Mar 2021 00:00:00Reported by Chloe ChamberlandType

Facebook for WordPress plugin vulnerability with CSRF to Stored XSS and Settings Deletion

Reporter	Title	Published	Views	Family All 6
wpexploit	Facebook for WordPress 3.0.0-3.0.3 - CSRF to Stored XSS and Settings Deletion	25 Mar 202100:00	–	wpexploit
OpenVAS	WordPress Facebook for WordPress Plugin 3.0.x < 3.0.4 CSRF Vulnerability	13 Apr 202100:00	–	openvas
NVD	CVE-2021-24218	12 Apr 202114:15	–	nvd
Prion	Cross site request forgery (csrf)	12 Apr 202114:15	–	prion
Cvelist	CVE-2021-24218 Facebook for WordPress 3.0.0-3.0.3 - CSRF to Stored XSS and Settings Deletion	12 Apr 202114:01	–	cvelist
CVE	CVE-2021-24218	12 Apr 202114:15	–	cve

Vulners

Node

-official-facebook-pixelRange<3.0.4

Source	Link
wordfence	www.wordfence.com/blog/2021/03/two-vulnerabilities-patched-in-facebook-for-wordpress-plugin/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Mar 2021 00:00Current

2.6Low risk

Vulners AI Score2.6

EPSS0.004