N/A Unfixed Closed 2026-02-10≤ 1.3.0 WPlyr Media Block <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via '_wplyr_accent_color' Parameter WordfenceCVE