Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter (CVE-2026-14249) | HOL Guard CVE