Medium 6.4 Unfixed Closed 2025-12-06≤ 0.4.1a List Attachments Shortcode <= 0.4.1a - Authenticated (Author+) Stored Cross-Site Scripting via list-attachments Shortcode CVEEUVDWordfence