Medium 4.3 Unfixed 2026-01-26≤ 3.5.1 Kama Thumbnail <= 3.5.1 - Cross-Site Request Forgery WordfenceCVE