What’s Vulnerable › Products

Word Balloon vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Word Balloon version is affected

Latest Word Balloon vulnerabilities

• CVE-2024-35781 — WordPress Word Balloon plugin <= 4.21.1 - Local File Inclusion vulnerability (CVSS 6.5)
• CVE-2023-5884 — Word Balloon < 4.20.3 - Avatar Removal via CSRF (CVSS 6.5)
• CVE-2022-4751 — Word Balloon < 4.19.3 - Contributor+ Stored XSS via Shortcode (CVSS 5.4)