marc4 Security Hardener

• CVE-2026-16149 High 8.8 Security Hardener <= 2.4.4 - Authenticated (Subscriber+) Privilege Escalation via REST API '/wp/v2/users' permission_callback Overwrite 0.6%