N/A Unfixed Closed 2026-03-20≤ 1.1 Post Flagger <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slug' Shortcode Attribute WordfenceCVE