Unknown MW WP Form

• CVE-2026-78363 Medium 4.8 MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution via Completion Message Merge Tags 0.2%
• CVE-2026-78364 Low 3.5 MW WP Form < 5.1.6 - Editor+ Stored XSS via Inquiry Data List 0.2%