WordPress Participants Database plugin <= 2.7.8.4 - Arbitrary File Deletion vulnerability (CVE-2026-28189) | HOL Guard CVE