Unknown Word Balloon

• CVE-2023-5884 Unrated Word Balloon < 4.20.3 - Avatar Removal via CSRF 0.3%
• CVE-2022-4751 Medium 5.4 Word Balloon < 4.19.3 - Contributor+ Stored XSS via Shortcode 0.5%