WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability (CVE-2026-73403) | HOL Guard CVE