Medium 6.5 Unfixed Closed 2024-12-19≤ 2.0 WordPress iframe Shortcode Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS) PatchstackCVEWordfenceWPScan