Medium 6.4 2025-10-03< 1.0.3 WordPress TicketSpot Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS) PatchstackWordfenceCVE