CVE-2025-3581 — The Newsletter WordPress plugin before 8.8.5 does not validate and escape some of its Widget options before outputting them back in a page/post where the block is embed, which could allow high privil — CVE Database · The Intelligence Room