WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability (CVE-2026-66453) | HOL Guard CVE