UpHeron
All vulnerabilities

WordPress plugins

CVE-2021-24218

Meta pixel for WordPress: Cross-Site Request Forgery (CSRF)

Severity
High 8.8
Published
25 Mar 2021
Added to UpHeron
5 Nov 2026
Also known as
WPV-4e0c97850392
Sources
WPVulnerability

Affected software

SoftwareAffected versions
Official Facebook Pixel (WordPress plugin)WordPress plugins · wp-plugin:official-facebook-pixel
  • From 3.0.0 up to 3.0.3

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-24218
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/official-facebook-pixel/facebook-for-wordpress-303-cross-site-request-forgery-to-stored-cross-site-scripting-and-settings-deletion-via-wp-ajax-savedelete-fbe-settings