CVE-2026-116864: Author PHP Object Injection in WPCargo… – CVSS 7.2 · Watchpost