Marc4 Security Hardener vulnerabilities

• marc4 security hardener Security Hardener <= 2.4.4 - Authenticated (Subscriber+) Privilege Escalation via REST API '/wp/v2/users' permission_callback Overwrite CVE-2026-16149 8.8 HighAugust 22, 2026