UpHeron
All vulnerabilities

WordPress plugins

CVE-2026-66705

Meta pixel for WordPress: Cross-site Scripting

Severity
High 7.1
Published
25 Mar 2021
Added to UpHeron
5 Nov 2026
Fixed in
5.2.2
Also known as
WPV-e1a11576403d
Sources
WPVulnerability

Affected software

SoftwareAffected versions
Official Facebook Pixel (WordPress plugin)WordPress plugins · wp-plugin:official-facebook-pixel
  • Every version before 5.2.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-66705
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/id/b0c12678-1d91-4916-aa11-20292d9e384b