CVE-2024-35781

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in YAHMAN Word Balloon allows PHP Local File Inclusion.This issue affects Word Balloon: from n/a through 4.21.1.

Score

CVSS 3.1 6.5 Medium

Status

Modified - audit@patchstack.com

Published

2024-06-21

Last modified

2026-04-28

Weaknesses

CWE-22

Affected products

• Word Balloon (Back2nature)
• Word Balloon (Yahman)

References

• https://patchstack.com/database/vulnerability/word-balloon/wordpress-word-balloon-plugin-4-21-1-local-file-inclusion-vu…