Unknown Word Balloon vulnerabilities

• back2nature word balloon WordPress Word Balloon plugin <= 4.21.1 - Local File Inclusion vulnerability CVE-2024-35781 6.5 MediumJune 21, 2024
• back2nature word balloon Word Balloon < 4.20.3 - Avatar Removal via CSRF CVE-2023-5884 6.5 MediumDecember 4, 2023
• back2nature word balloon Word Balloon < 4.19.3 - Contributor+ Stored XSS via Shortcode CVE-2022-4751 5.4 MediumJanuary 23, 2023