Bitacre Wp-clippy vulnerabilities

• bitacre wp-clippy WP-Clippy <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-5505 6.4 MediumMay 5, 2026