WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulnerability (CVE-2026-32466) | HOL Guard CVE