WordPress ICS Calendar plugin <= 12.1.1 - Cross Site Scripting (XSS) vulnerability (CVE-2026-59516) | HOL Guard CVE