Facebook Chat Plugin – Live Chat Plugin for WordPress, 207ceacf45badb6362f9180b92f9c6f89ecce69a
- CVE, Research URL
- Published on
- Jun 17, 2019
- Research Description
- Facebook Chat Plugin – Live Chat Plugin for WordPress [facebook-messenger-customer-chat] < 1.3 Facebook Chat Plugin <= 1.2 - Cross-Site Request Forgery to Site Settings Changes The Facebook Chat Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to change site settings via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
- Affected versions
-
max 1.3.
- Status
-
vulnerable