Medium 4.3 Unfixed Closed 2025-09-11≤ 2.1.4 WordPress AutoCatSet Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF) PatchstackEUVDWordfenceCVE