LIQUID SPEECH BALLOON

liquid-speech-balloon · plugin

Known security vulnerabilities for LIQUID SPEECH BALLOON. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

latest Jul 23, 2026

Vulnerabilities

CVE-2023-27889
Cross-site request forgery (CSRF) vulnerability in LIQUID SPEECH BALLOON versions prior to 1.2 allows a remote unauthenticated attacker to h
High 8.8
CVE-2026-65527
WordPress LIQUID SPEECH BALLOON plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
Medium 6.5
CVE-2019-17070
The liquid-speech-balloon (aka LIQUID SPEECH BALLOON) plugin before 1.0.7 for WordPress allows XSS with Internet Explorer.
Medium 6.1