Unknown click5 CRM add-on to WPForms

• CVE-2026-84259 High 8.8 click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications 0.3%
• CVE-2026-84252 Critical 9.8 click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update 0.2%