N/A Unfixed Closed 2026-03-20≤ 1.6 Reward Video Ad for WordPress <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Admin Settings WordfenceCVE