Facebook Chat Plugin – Live Chat Plugin for WordPress, 45072bd4b46f819196737a98e8348c94a41fa9c6
- CVE, Research URL
- Published on
- Aug 04, 2020
- Research Description
- Facebook Chat Plugin – Live Chat Plugin for WordPress [facebook-messenger-customer-chat] < 1.6 Facebook Chat Plugin <= 1.5 - Missing Capabilities Check The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_update_options function in versions up to, and including, 1.5. This flaw makes it possible for low-level authenticated attackers to connect their own Facebook Messenger account to any site running the vulnerable plugin and engage in chats with site visitors on affected sites.
- Affected versions
-
max 1.6.
- Status
-
vulnerable