Medium 6.5 Unfixed 2025-09-22≤ 2.7.1 WordPress JSM file_get_contents() Shortcode Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS) PatchstackWordfenceEUVDCVE