CVE-2025-64271: CSRF in WP Plugin Manager | NextGuard