Facebook messenger plugin vulnerabilities