N/A 2026-03-28< 2.0 Twentig <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'featuredImageSizeWidth' WordfenceCVE