WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by ? in WordPress Theme Togo versions 1.0.4...