N/A Unfixed Closed 2026-03-20≤ 1.2.1 Comment SPAM Wiper <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'API Key' Setting WordfenceCVE