N/A Unfixed Closed 2026-03-20≤ 1.2.1 Sherk Custom Post Type Displays <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute WordfenceCVE