https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T05:44:11.192840+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24218 CVE-2021-24218 — Facebook for WordPress 3.0.0-3.0.3 - CSRF to Stored XSS and Settings Deletion 2026-10-27T05:44:11.193872+00:00

Affected: Unknown Facebook for WordPress

The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce protection. The settings in the saveFbeSettings function had no sanitization allowing for script tags to be saved.