Open Redirect Vulnerability in Facebook for WooCommerce
CVE-2026-49059

4.7MEDIUM

Key Information:

Vendor

WordPress
Status
Facebook For WooCommerce
Vendor
CVE Published:
27 May 2026

What is CVE-2026-49059?

An Open Redirect vulnerability exists in Facebook for WooCommerce, which can redirect users to untrusted sites. This flaw could be exploited by attackers to conduct phishing attacks, potentially compromising user data and security. It is crucial for website administrators using this plugin to update to secure versions to mitigate risk.

Affected Version(s)

Facebook for WooCommerce <= 3.7.0

References

https://patchstack.com/database/wordpress/plugin/facebook...
vdb-entry

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

timomangcut | Patchstack Bug Bounty Program
.