PLUGIN SECURITY
Is Facebook For Woocommerce safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Facebook For Woocommerce WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
facebook-for-woocommerce - Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- Meta for WooCommerce [facebook-for-woocommerce] < 1.9.15 [CVE-2019-15840, Facebook for WooCommerce <= 1.9.12 - CSRF allowing Option Update, Facebook for WooCommerce <= 1.9.12 - Cross-Site Request Forgery]
- Meta for WooCommerce [facebook-for-woocommerce] < 1.9.15 [CVE-2019-15841, Facebook for WooCommerce <= 1.9.12 - Cross-Site Request Forgery allowing Option Update]
- Meta for WooCommerce [facebook-for-woocommerce] < 1.9.14 [WordPress Facebook for WooCommerce plugin <= 1.9.12 - Cross-Site Request Forgery (CSRF) vulnerability allowing Option Update]
- Meta for WooCommerce [facebook-for-woocommerce] < 3.5.8 [CVE-2025-64296, WordPress Facebook for WooCommerce Plugin <= 3.5.7 is vulnerable to Broken Access Control, Facebook for WooCommerce <= 3.5.7 - Missing Authorization to Unauthenticated Notification Dismissal]
- Meta for WooCommerce [facebook-for-woocommerce] < 3.7.1 [CVE-2026-49059, Meta for WooCommerce <= 3.7.0 - Unauthenticated Open Redirect]
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- Meta pixel for WordPress — 400000+ active installs
- Pixel Cat – Conversion Pixel Manager — 40000+ active installs
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.