CVE-2025-49306: catchsquare wp social widget – CVSS 5.4 · Watchpost