Medium 5.3 Unfixed Closed 2026-04-22≤ 1.0.0 WordPress Katalogportal-pdf-sync Widget Plugin <= 1.0.0 is vulnerable to Broken Access Control EUVDPatchstackWordfenceCVE