Home Tools CVE CVE-2026-66705
HIGH

CVE-2026-66705

2026-08-06 CVSS v3.1
CVSS
7.1

Description

Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.

Weakness (CWE)

CWE-79 Cross-site Scripting (XSS)

EPSS Score

0.14%
Probability of exploitation in next 30 days
3.9th percentile

References

https://patchstack.com/database/wordpress/plugin/official-facebook-pixel/vulnerability/wordpress-facebook-for-wordpress-plugin-5-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE