idor 3 CVE-2026-15231: TaxoPress AI Preview Leaked Private Post-Derived Output Jul 24, 2026 CVE-2026-15248: Meta Box Contributor+ Arbitrary Attachment Deletion Jul 20, 2026 CVE-2026-14224: Easy Appointments Subscriber+ IDOR Enables Cross-User Notification Redirection Jun 13, 2026