CVE-2026-118075: Contributor PHP Object Injection in WP… – CVSS 8.8 · Watchpost