Medium 6.4 Unfixed Closed 2025-09-11≤ 1.8.5 WordPress ThemeLoom Widgets Plugin <= 1.8.5 is vulnerable to Cross Site Scripting (XSS) PatchstackEUVDWordfenceCVE