Medium 6.1 Unfixed Closed 2026-05-06≤ 1.0 WordPress Blog Settings Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS) PatchstackCVEWordfence