N/A 2026-02-04< 1.3.7 Dynamic Widget Content <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Content Field WordfenceCVE