Medium 5.4 2024-12-28< 6.0.1 WordPress Floating Button Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF) PatchstackCVEWordfenceWPScan