Medium 6.4 2025-05-31< 1.4.0 WordPress Product Subtitle for WooCommerce Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS) EUVDPatchstackWordfenceCVE