Medium 6.4 Unfixed Closed 2025-05-15≤ 1.3.2 WordPress Bon Toolkit Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS) EUVDPatchstackWordfenceCVE