Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field (CVE-2026-12583) | HOL Guard CVE