N/A Unfixed Closed 2026-01-19≤ 1.02 WP Hello Bar <= 1.02 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'digit_one' and 'digit_two' Parameters WordfenceCVE