Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests (CVE-2026-53760) | HOL Guard CVE