CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.4. It affects WordPress. Exploitation may require the attacker to be authenticated.
CVE
CVE-2020-36838
Severity
HIGH
CVSS
7.4
EPSS
0.35%
WordPress
Original NVD Description
The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_update_options function in versions up to, and including, 1.5. This flaw makes it possible for low-level authenticated attackers to connect their own Facebook Messenger account to any site running the vulnerable plugin and engage in chats with site visitors on affected sites.