CVE-2018-5214: Add Link To Facebook Project Add Link To Facebook

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fb_facebook_id parameter to wp-admin/profile.php.

Affected products

• Add Link To Facebook Project Add Link To Facebook: up to and including 2.3

Published 2018-01-04. Last modified 2026-06-17.