N/A Unfixed Closed 2026-02-13≤ 1.0.2 Sphere Manager <= 1.0.2 - Authenticated (Contributor+) Cross-Site Scripting via 'width' Shortcode Attribute WordfenceCVE