N/A Unfixed Closed 2026-03-20≤ 2.0.1 Ad Short <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'client' Shortcode Attribute WordfenceCVE