N/A Unfixed Closed 2026-01-27≤ 1.2 Vzaar Media Management <= 1.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] WordfenceCVE