N/A Unfixed Closed 2026-03-20≤ 1.0.9 WP NG Weather <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes WordfenceCVE