Medium 6.4 Unfixed 2026-01-07≤ 2.4 AD Sliding FAQ <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVEWordfence