Spexo <= 2.0.11 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation (CVE-2026-12471) | HOL Guard CVE