N/A Unfixed Closed 2026-03-06≤ 1.5 WP App Bar <= 1.5 - Unauthenticated Stored Cross-Site Scripting via 'app-bar-features' Parameter WordfenceCVE