A critical flaw in the official Facebook for WordPress plugin could be exploited by attackers for remote code execution attacks.