Medium 6.4 Unfixed Closed 2025-07-09≤ 1.3.1 WordPress Simple Featured Image Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS) EUVDPatchstackWordfenceCVE