enable-media-replace 1 CVE-2026-85655: Enable Media Replace Lets Authors Rewrite Posts They Cannot Edit Nov 9, 2026