Medium 4.4 2026-01-24< 1.2.9 JavaScript Notifier <= 1.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings EUVDWordfenceCVE