N/A Unfixed Closed 2026-03-20≤ 1.0 WP Random Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cat' Shortcode Attribute WordfenceCVE