User Management <= 1.2 - Missing Authorization to Unauthenticated Plugin Settings Modification (CVE-2026-12097) | HOL Guard CVE