Plugin icon

Word Balloon

word-balloon

Vulnerabilities:

3

Last Updated:

January 7, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2024-06-19
Title
Word Balloon < 4.22.0 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 4.22.0
CVSS
8.8 (high)
Published
2023-11-13
Title
Word Balloon < 4.20.3 - Avatar Removal via CSRF
Fixed in
Fixed in 4.20.3
CVSS
4.3 (medium)
Published
2022-12-28
Title
Word Balloon < 4.19.3 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 4.19.3
CVSS
6.8 (medium)