Simple Like Page – Fast & Privacy-Friendly Page Embeds

Simple Like Page – Fast & Privacy-Friendly Page Embeds has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Missing Authorization.

Every one of the 3 issues recorded for Simple Like Page – Fast & Privacy-Friendly Page Embeds has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Simple Like Page – Fast & Privacy-Friendly Page Embeds is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Simple Like Page – Fast & Privacy-Friendly Page Embeds vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-3583

Simple Like Page Plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Read the full analysis

Vulnerability Records

3 records
Simple Like Page – Fast & Privacy-Friendly Page Embeds banner
Latestv2.0.1

Simple Like Page – Fast & Privacy-Friendly Page Embeds

topdevs.net

Author

topdevs.net

4.3(24)
86/100
Last Updated
2026-04-28 (5mo ago)
Active Installs
10,000+
Downloads
351,955
Requires WP
5.8+
Requires PHP
7.2+
Tested up to
WP 6.9.7
Created
2011-09-09 (15y ago)

Embedding social Page content often slows down WordPress sites and loads third-party scripts before visitors interact. Simple Like Page helps you embed Meta™ Page content without hurting performance, by delaying script loading until interaction or visibility. This reduces unnecessary requests, improves Core Web Vitals, and gives you control over when external scripts load. This plugin is not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc. All trademarks belong to their respective owners. Key Features Privacy-First Loading Delays Facebook script loading until user interaction Optional lazy loading when the embed enters the viewport Helps reduce third-party requests on initial page load Performance Focused Lightweight HTML placeholder before activation No render-blocking Facebook SDK on initial page load Multiple Integration Options Gutenberg block Shortcode Classic widget Theme template tag Extensible Hooks and filters for add-ons Architecture designed for future consent-based extensions How It Works Renders a placeholder instead of the Facebook embed Loads Facebook scripts only after user interaction (or when in view, if enabled) Renders the Page Plugin once scripts are available This approach is designed to improve performance and reduce unnecessary third-party requests. Usage You can add the Facebook Page Plugin in four different ways. 1. Gutenberg Block (Recommended) Edit any post or page Click Add Block (+) Search for Simple Like Page Insert the block Paste your Facebook Page URL Adjust layout and privacy options in the block sidebar 2. Shortcode Use the shortcode inside any post or page: sfp-page-plugin Shortcode parameters: url width height hide_cover show_facepile small_header timeline events messages locale click_to_load lazy_load placeholder_text placeholder_bg_color placeholder_text_color Example: [sfp-page-plugin url="https://www.facebook.com/WordPress" width="320" timeline="true"] 3. Widget Go to Appearance -> Widgets Add SFP – Like Page Plugin Enter your Facebook Page URL Configure display options Save 4. Template Tag (Advanced) For theme developers: <?php if ( function_exists( 'sfp_page_plugin' ) ) { $args = array( 'url' => 'https://www.facebook.com/WordPress/', 'width' => '300', 'timeline' => true, 'locale' => 'en_US' ); sfp_page_plugin( $args ); } ?> Performance & Privacy By default, the plugin delays Facebook loading until interaction. If you enable lazy loading, scripts are loaded when the embed is in view. Facebook may set cookies or process data once the embed loads. You are responsible for updating your privacy policy as needed. Settings The plugin includes a Performance & Privacy section where you can control: Click-to-load (default off) Lazy loading (default on) Placeholder text Placeholder colors You can also set a default Facebook Page URL and locale in the settings screen. Compatibility Works with modern WordPress themes Compatible with caching and performance plugins Supports Gutenberg and Classic Editor Support Found a bug or have a feature request? Please use the Support tab on WordPress.org.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C