N/A Unfixed Closed 2026-01-13≤ 1.2 WMF Mobile Redirector <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Parameters WordfenceCVE