N/A 2026-01-27< 1.0.3 Buy Now Plus <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes WordfenceCVE