WordPress ConvertPlus plugin <= 3.6.3 - Authenticated (Subscriber+) PHP Object Injection vulnerability

Authenticated Subscriber+ PHP Object Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin ConvertPlus versions = 3.6.3...