CVE-2026-3488: WP Statistics Missing Authorization (≤14.16.4) | NextGuard