Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_auctions_bids_list (CVE-2026-4110) | HOL Guard CVE