Medium 6.1 Unfixed Closed 2025-07-23≤ 1.0.3 WordPress YANewsflash Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS) EUVDPatchstackWordfenceCVE