WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability (CVE-2026-73365) | HOL Guard CVE