Fan Page Widget by ThemeNcode
Fan Page Widget by ThemeNcode has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Fan Page Widget by ThemeNcode has a vendor fix available, so running the current release closes it.
All of these findings were reported by Joshua Chan. Fan Page Widget by ThemeNcode is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.
CVE-2024-33695Fan Page Widget by ThemeNcode <= 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Fan Page Widget by ThemeNcode
Author
Abdul Awal Uzzal
Facebook Fan Page widget comes with an widget that you can use on any widget areas. You can set Facebook Page url, Width, Height and other options. Pretty simple to use. Best part of this plugin is you don’t have to create any facebook application. Just install the plugin, put in your page url and nothing more…! Also comes with a shortcode which you can use anywhere of your wordpress site. ([themencode-fb-page-widget]) Video Overview | Shortcode Generator | Live Demo Features : Very Easy to use Just install the plugin, set options and enjoy Uses latest facebook api (16.0) Comes with [themencode-fb-page-widget], so you can use it anywhere of your site More Plugins to check : TNC FlipBook – PDF Viewer for WordPress WP File Access Manager TNC BookShelf Pro Please Don’t Forget to leave a review if you find this plugin useful. Thanks
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C