Medium 5.4 Unfixed Closed 2025-02-03≤ 1.3.6 WordPress WP Finance Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS) PatchstackCVEEUVDWordfence