N/A Unfixed Closed 2026-02-10≤ 1.1 BuddyHolis ListSearch <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'placeholder' Shortcode Attribute WordfenceCVE