WordPress Car Rental Manager plugin <= 1.3.9 - PHP Object Injection vulnerability (CVE-2026-27380) | HOL Guard CVE