Medium 6.4 Unfixed 2025-12-12≤ 2.4.2 Reviews Sorted <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'space' Shortcode Attribute CVEWordfence