N/A Unfixed Closed 2026-02-10≤ 1.3.6 WDES Responsive Popup <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'attr' Shortcode Attribute WordfenceCVE