WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability (CVE-2026-66424) | HOL Guard CVE