Medium 6.1 Unfixed Closed 2025-05-15≤ 1.2 WordPress Download HTML TinyMCE Button Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS) EUVDPatchstackWordfenceCVE