CVE-2026-6125: Code Injection in Warm-Flow Plugin ≤1.8.5 | NextGuard