N/A 2026-02-05< 2.8.4 WaveSurfer-WP <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'src' Shortcode Attribute WordfenceCVE