Medium 6.4 Unfixed Closed 2026-04-22≤ 1.2 WordPress WP Circliful Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS) EUVDPatchstackWordfenceCVE