CVE-2026-66705

The Facebook for WordPress plugin versions up to 5.2.1 are vulnerable to unauthenticated Cross Site Scripting (XSS), allowing attackers to inject malicious scripts that could compromise user data and site integrity. This high-severity vulnerability poses significant risks to website administrators and users interacting with affected WordPress sites. Organizations using this plugin should prioritize immediate updates to mitigate potential exploitation.