Back2nature Word Balloon
3 CVEs affecting Back2nature Word Balloon. Latest disclosed: 2024-06-21. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-35781 | Medium | 6.5 | 2024-06-21 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in YAHMAN Word Balloon allows PHP Local File Inclusion.This issue… |
CVE-2023-5884 | Medium | 6.5 | 2023-12-04 | The Word Balloon WordPress plugin before 4.20.3 does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to trick a logg… |
CVE-2022-4751 | Medium | 5.4 | 2023-01-23 | The Word Balloon WordPress plugin before 4.19.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which co… |