https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T16:47:33.729312+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-36838 CVE-2020-36838 — Facebook Chat Plugin <= 1.5 - Missing Capabilities Check 2026-10-25T16:47:33.730602+00:00

Affected: Facebook Chat Plugin – Live Chat Plugin for WordPress

The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_update_options function in versions up to, and including, 1.5. This flaw makes it possible for low-level authenticated attackers to connect their own Facebook Messenger account to any site running the vulnerable plugin and engage in chats with site visitors on affected sites.