WP Clinic
Log in Sign up

CVE

CVE-2025-64296 — Meta for WooCommerce [facebook-for-woocommerce] < 3.5.8

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-64296 Meta for WooCommerce [facebook-for-woocommerce] < 3.5.8 Missing Authorization Unknown < 3.5.8 3.5.8 2025-10-29

CVE-2025-64296

The Facebook for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on a function in versions up to, and including, 3.5.7. This makes it possible for unauthenticated attackers to dismiss notices.

Source: Wordfence

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.