Description
WordPress Plugin The Official Facebook Chat is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently update plugin's options and hook-up their own Facebook Messenger account and engage in chats with site visitors. WordPress Plugin The Official Facebook Chat version 1.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.6 or latest