Medium 6.4 Unfixed Closed 2025-07-18≤ 1.2.1 WordPress Testimonial Post type Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS) PatchstackEUVDWordfenceCVE