All vulnerabilities

WordPress plugins

CVE-2021-24217

Meta pixel for WordPress: Deserialization of Untrusted Data

Severity
High 8.1
Published
25 Mar 2021
Added to UpHeron
5 Nov 2026
Fixed in
3.0.0
Also known as
WPV-5f53f116a0e0
Sources
WPVulnerability

Affected software

SoftwareAffected versions
Official Facebook Pixel (WordPress plugin)WordPress plugins · wp-plugin:official-facebook-pixel
  • Every version before 3.0.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-24217
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/official-facebook-pixel/meta-pixel-for-wordpress-222-php-object-injection