CVE-2025-64296
The Facebook for WooCommerce plugin, versions 3.5.7 and earlier, lacks proper capability checks in certain functions, allowing unauthenticated users to dismiss notifications.
Based on public CVE data (MITRE/NVD).
CVE
CVE-2025-64296 — Meta for WooCommerce [facebook-for-woocommerce] < 3.5.8
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-64296 | Meta for WooCommerce [facebook-for-woocommerce] < 3.5.8 | Missing Authorization | Unknown | < 3.5.8 | 3.5.8 | 2025-10-29 | — |
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.