CVE-2024-1207: SQL Injection in WP Booking Calendar | NextGuard