Medium 4.4 Unfixed Closed 2026-01-14≤ 1.0.8 WP Allowed Hosts <= 1.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'allowed-hosts' Parameter EUVDWordfenceCVE