N/A Unfixed Closed 2026-03-06≤ 1.6 Consensus Embed <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'src' Shortcode Attribute WordfenceCVE