Medium 5.4 Closed 2024-12-13< 3.5.1 WordPress Sponsors Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS) PatchstackCVEWordfenceWPScan