CVE-2026-5229: Form Notify Auth Bypass via LINE OAuth Callback (CVSS 9.8)

CVE-2026-5229 (CVSS 9.8 Critical): auth bypass in Form Notify ≤ 1.1.10. Any visitor can hijack any WordPress account, including admin, via LINE OAuth.