Medium 6.4 Unfixed Closed 2025-03-01≤ 2.08 WordPress Clicface Trombi Plugin <= 2.08 is vulnerable to Cross Site Scripting (XSS) EUVDPatchstackWordfenceCVE