ShapedPlugin Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server (CVE-2026-10735) | HOL Guard CVE