Database for Contact Form 7, WPforms, Elementor forms < 1.5.5 - Authenticated SQL Injection via id Parameter (CVE-2026-14872) | HOL Guard CVE