Medium 6.1 Unfixed Closed 2026-02-07≤ 1.0.0 Subitem AL Slider <= 1.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] EUVDWordfenceCVE