Medium 6.1 Unfixed Closed 2025-07-28≤ 1.3.2 WordPress Affiliate Plus Plugin <= 1.3.2 is vulnerable to Cross Site Request Forgery (CSRF) PatchstackEUVDWordfenceCVE