WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Travesia versions = 1.1.16...