CVE-2026-87900: Argument injection in WP Toolkit for… – CVSS 9.4 · Watchpost